fortimanager

2 live · 2 on record · last incident 4 days ago

Dec ’25records per month, by first reportNov ’26

Live2

live9.0
FortiManager FortiManager FGFM elevation before registration password verification
Patch now · Disclosed · since 10 Nov 2026
An improper authorization flaw in FortiManager's FGFM interface allows an unauthenticated attacker that can reach the FGFM port to execute code via crafted packets before password verification. The issue carries a CVSS v3 score of 9.0, marking it as critical.
live9.1
FortiManager Fortinet Authorization Bypass Flaw in dmserver
Patch now · Disclosed · since 10 Nov 2026
An authorization bypass vulnerability in FortiManager and FortiAnalyzer allows authenticated administrators to access other VDOMs via crafted HTTP requests. Fortinet has published advisories regarding this issue.
Do:Check Fortinet advisory for patch availability and apply updates.

Nothing closed yet.