CVE-2024-26011: Execute unauthorized code or commands in Fortinet FortiManager
Description
CVE-2024-26011 is a vulnerability in multiple Fortinet products including FortiManager, FortiOS, FortiPAM, FortiPortal, FortiProxy, and FortiSwitchManager. It involves missing authentication for critical functions, allowing an attacker to execute unauthorized code or commands via specially crafted packets. The vulnerability affects a wide range of versions across these products. The CVSS score is 5.2, indicating a medium severity level. No official patch or remediation is currently available, and no known exploits are reported in the wild.
CVSS v3.1
Score 5.2medium
Affected software
Fortinet
FortiManager
Fortinet
FortiOS
Fortinet
FortiSwitchManager
Fortinet
FortiPAM
Fortinet
FortiPortal
Fortinet
FortiProxy
pkg:github/fortinet/fortimanagerpkg:github/fortinet/fortiswitchmanagercpe:2.3:a:fortinet:fortiswitchmanager:7.2.3:*:*:*:*:*:*:*cpe:2.3:a:fortinet:fortiswitchmanager:7.2.2:*:*:*:*:*:*:*cpe:2.3:a:fortinet:fortiswitchmanager:7.2.1:*:*:*:*:*:*:*cpe:2.3:a:fortinet:fortiswitchmanager:7.2.0:*:*:*:*:*:*:*cpe:2.3:a:fortinet:fortiswitchmanager:7.0.3:*:*:*:*:*:*:*cpe:2.3:a:fortinet:fortiswitchmanager:7.0.2:*:*:*:*:*:*:*Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2024-26011) affects Fortinet FortiManager versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, and 6.4.0 through 6.4.14, as well as FortiOS, FortiPAM, FortiPortal, FortiProxy, and FortiSwitchManager products and versions as specified. It is caused by missing authentication on critical functions, which allows attackers to execute unauthorized code or commands by sending specially crafted packets to the affected systems. The vulnerability has a CVSS 3.1 base score of 5.2, reflecting medium impact primarily on integrity. No official fix or patch has been released yet, and there are no known active exploits in the wild.
Potential Impact
Successful exploitation allows an unauthenticated attacker to execute unauthorized code or commands on affected Fortinet products. This impacts the integrity of the system but does not affect confidentiality or availability according to the CVSS vector. The vulnerability could lead to unauthorized control over affected devices or systems.
Mitigation Recommendations
No official patch or remediation is currently available for this vulnerability. Organizations should monitor Fortinet advisories for updates. Until a fix is released, consider applying network-level protections such as restricting access to management interfaces and employing intrusion detection/prevention systems to detect anomalous packets targeting these devices. Avoid exposing affected devices directly to untrusted networks.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- fortinet
- Date Reserved
- 2024-02-14T09:18:43.245Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- unavailable
Threat ID: 6ada17294d27ba8daa5b44b2
Added to database: 10/22/2026, 14:01:13 UTC
Last enriched: 10/22/2026, 14:15:42 UTC
Last updated: 10/23/2026, 01:15:16 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.