Fortinet has released patches addressing authentication vulnerabilities across its FortiWeb, FortiManager, and FortiClient product lines, urging administrators to update promptly due to the sensitive nature of these systems This article explores authentication vulnerabilities fortiweb. .
CVE IDs: Affected Product Vulnerability Type Fixed Version(s) CVE-2026-26035 FortiWeb Improper authentication (CWE-287) via wildcard RADIUS setting allowing login with random credentials 8.0.3, 7.6.7, 7.4.12, 7.2.13 CVE-2026-70466 FortiWeb WAF Content-Encoding WAF evasion; incomplete list of disallowed inputs (CWE-184) letting attackers bypass WAF policies Not affected in 8.0.3+; upgrade to latest 7.x branch fix CVE-2026-70465 FortiClient for Windows Classic buffer overflow (CWE-120) exploitable via crafted/spoofed DNS responses Fixed in releases above 7.4.3 and 7.2.11 CVE-2026-70467 FortiSIEM Server-side request forgery (SSRF, CWE-918) allowing an authenticated attacker to trigger HTTP requests Upgrade path per affected 6.5–7.5.0 branches nvd.nist+1 CVE-2026-70468 FortiManager / FortiManager Cloud Authentication bypass via alternate path/channel (CWE-288) in FGFM protocol, enabling FortiGate impersonation 7.6.2, 7.4.6, 7.2.10 CVE-2026-71407 FortiOS Stack-based buffer overflow (CWE-121) in WAD daemon via crafted sockets (requires Kerberos + SOCKS explicit proxy) Upgrade beyond 7.6.6 tenable+1 CVE-2026-71408 FortiOS Allocation of resources without limits (CWE-770); slow HTTP DoS on the web UI Upgrade beyond affected 7.2/7.4/7.6.6 builds nvd.nist+1 CVE-2026-49975 FortiWeb, FortiAppSec Cloud (via Apache HTTP Server) “HTTP/2 Bomb” — memory allocation with excessive size value (CWE-789), an HPACK compression bomb combined with flow-control stalls causing memory exhaustion Mitigation via FortiWeb/FortiAppSec Cloud rules; upstream fix in Apache HTTP Server 2.4.68 cve+2 Strengthen Your SOC by Accelerating Threat Detection & Rapid Investigations.
