CVE-2022-26118

Severity: medium (CVSS 6.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-07-18 · updated 2026-06-17
Weakness: CWE-269

Description

A privilege chaining vulnerability [CWE-268] in FortiManager and FortiAnalyzer 6.0.x, 6.2.x, 6.4.0 through 6.4.7, 7.0.0 through 7.0.3 may allow a local and authenticated attacker with a restricted shell to escalate their privileges to root due to incorrect permissions of some folders and executable files on the system.

Affected products

Fortinet FortiAnalyzer: from 6.0.0 through 6.0.11; from 6.2.0 through 6.2.9; from 6.4.0 before 6.4.8; from 7.0.0 before 7.0.4 — fixed in 6.4.8, 7.0.4
Fortinet FortiManager: from 6.0.0 through 6.0.11; from 6.2.0 through 6.2.9; from 6.4.0 before 6.4.8; from 7.0.0 before 7.0.4 — fixed in 6.4.8, 7.0.4

How to fix

Upgrade to a fixed version: Fortinet FortiAnalyzer 6.4.8, 7.0.4; Fortinet FortiManager 6.4.8, 7.0.4. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-26118 or the next vulnerability affects your stack