NewsFortinet PSIRT

    Authorization bypass through user-controlled key in GUI

    Share
    CVSSv3 Score: 8.7 An Authorization Bypass Through User-Controlled Key vulnerability [cwe-639] in FortiManager, FortiManager Cloud and FortiSase-Sovereign GUI may allow an authenticated attacker to execute commands outside of the expected scope via specially crafted HTTP request. Revised on 2026-11-10 00:00:00

    Other advisories

    Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-228

    ID