CVE-2024-48886

score

<0.1

cvss

9.0

epss

0.5%

published

2025-01-14

kev added

—

first seen

2026-10-21

Fortinet FortiOS versions 7.4.0-7.4.4, 7.2.0-7.2.8, 7.0.0-7.0.15, 6.4.0-6.4.15, FortiProxy versions 7.4.0-7.4.4, 7.2.0-7.2.10, 7.0.0-7.0.17, 2.0.0-2.0.14, FortiManager versions 7.6.0-7.6.1, 7.4.1-7.4.3, FortiManager Cloud versions 7.4.1-7.4.3, and FortiAnalyzer Cloud versions 7.4.1-7.4.3 contain a broken authentication caused by weak password policies, letting attackers execute unauthorized code or commands via brute-force attacks, exploit requires network access and repeated login attempts.