CVE-2024-40593

score

<0.1

cvss

6.0

epss

0.1%

published

2025-12-11

kev added

—

first seen

2026-10-21

Fortinet FortiAnalyzer 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all versions; FortiManager 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all versions; FortiOS 7.6.0, 7.4.4, 7.2.7, 7.0.14; and FortiPortal 6.0 all versions contain a key management error caused by improper protection of private keys in the admin shell, letting authenticated admin retrieve certificate private keys, exploit requires admin authentication.