What’s Vulnerable › Vulnerabilities
CVE-2024-26009
- Severity: high (CVSS 8.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-08-12 · updated 2026-06-17
- Weakness: CWE-288
Description
An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through 6.4.15, FortiOS 6.2.0 through 6.2.16, FortiOS 6.0 all versions, FortiPAM 1.2.0, FortiPAM 1.1.0 through 1.1.2, FortiPAM 1.0.0 through 1.0.3, FortiProxy 7.4.0 through 7.4.2, FortiProxy 7.2.0 through 7.2.8, FortiProxy 7.0.0 through 7.0.15, FortiSwitchManager 7.2.0 through 7.2.3, FortiSwitchManager 7.0.0 through 7.0.3 allows an unauthenticated attacker to seize control of a managed device via crafted FGFM requests, if the device is managed by a FortiManager, and if the attacker knows that FortiManager's serial number.
Affected products
- Fortinet FortiOS (FortiGate): from 6.0.0 before 6.2.17; from 6.4.0 before 6.4.16 — fixed in 6.2.17, 6.4.16
- Fortinet FortiPAM: from 1.0.0 through 1.2.0
- Fortinet FortiProxy: from 7.0.0 before 7.0.16; from 7.2.0 before 7.2.9; from 7.4.0 before 7.4.3 — fixed in 7.0.16, 7.2.9, 7.4.3
- Fortinet FortiSwitchManager: from 7.0.0 before 7.0.4; from 7.2.0 before 7.2.4 — fixed in 7.0.4, 7.2.4
How to fix
Upgrade to a fixed version: Fortinet FortiOS (FortiGate) 6.2.17, 6.4.16; Fortinet FortiProxy 7.0.16, 7.2.9, 7.4.3; Fortinet FortiSwitchManager 7.0.4, 7.2.4. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2024-26009 or the next vulnerability affects your stack