CVE-2024-26011

score

<0.1

cvss

5.3

epss

0.6%

published

2024-11-12

kev added

—

first seen

2026-10-21

Fortinet FortiManager versions 7.4.0-7.4.2, 7.2.0-7.2.4, 7.0.0-7.0.11, 6.4.0-6.4.14, FortiPAM versions 1.2.0, 1.1.0-1.1.2, 1.0.0-1.0.3, FortiProxy versions 7.4.0-7.4.2, 7.2.0-7.2.9, 7.0.0-7.0.17, 2.0.0-2.0.14, 1.2.0-1.2.13, 1.1.0-1.1.6, 1.0.0-1.0.7, FortiSwitchManager versions 7.2.0-7.2.3, 7.0.0-7.0.3, FortiPortal versions 6.0.0-6.0.14, and FortiOS versions 7.4.0-7.4.3, 7.2.0-7.2.7, 7.0.0-7.0.14, 6.4.0-6.4.15, 6.2.0-6.2.16, 6.0.0-6.0.18 contain a missing authentication vulnerability in critical functions caused by lack of proper access controls, letting attackers execute unauthorized code or commands via specially crafted packets.