CVE-2024-26013

score

<0.1

cvss

7.5

epss

0.5%

published

2025-04-08

kev added

—

first seen

2026-10-21

Fortinet FortiOS (versions 7.4.0-7.4.4, 7.2.0-7.2.8, 7.0.0-7.0.15, 6.4.0-6.4.15, before 6.2.16), FortiProxy, FortiManager, FortiAnalyzer, FortiVoice, and FortiWeb contain an improper restriction of communication channel to intended endpoints caused by intercepting FGFM authentication requests, letting unauthenticated attackers in a man-in-the-middle position impersonate management devices, exploit requires attacker to intercept network traffic.