CVE-2026-70468 is an authentication bypass vulnerability in Fortinet FortiManager and FortiManager Cloud products affecting versions 7.6.1, 7.4.3 through 7.4.5, and 7.2.5 through 7.2.9. The vulnerability arises from improper access control due to an alternate path or channel that can be exploited by an attacker without privileges or user interaction. The CVSS v3.1 score is 7.3, indicating high severity with network attack vector, high impact on confidentiality, integrity, and availability, and requiring no privileges or user interaction. The vendor has released an official fix to remediate this vulnerability.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to bypass authentication controls and gain unauthorized access to FortiManager systems. This can lead to full compromise of confidentiality, integrity, and availability of the affected system. No known exploits are currently reported in the wild.

An official fix is available from Fortinet to remediate this vulnerability. Users should apply the vendor-provided patches promptly to affected versions. Since this is not a cloud service, remediation depends on applying the update to on-premises installations.