CVE-2026-70468

Think of FortiManager like the control room for your network security devices. This bug lets a remote attacker slip past the “front door check” (authentication) through an alternate route, so they can potentially change settings, access sensitive information, or disrupt operations—without needing valid login credentials.

This matters if you use Fortinet FortiManager or FortiManager Cloud to manage your network/security devices and you are running one of the listed vulnerable versions. Because the flaw does not require authentication and works over the network, the risk is highest when the product is reachable from the internet or from any network path an attacker can access.

This is a RED issue because attackers can bypass authentication without credentials, which can quickly lead to total loss of control over the management system. Even though no clear, dated public report confirms exploitation in the wild, the attacker potential is severe and patches are available for affected versions.