CVE-2024-26013

A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15 and before 6.2.16, Fortinet FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9 and before 7.0.15, Fortinet FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.14 and before 6.2.13, Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.14 and before 6.2.13, Fortinet FortiVoice version 7.0.0 through 7.0.2 before 6.4.8 and Fortinet FortiWeb before 7.4.2 may allow an unauthenticated attacker in a man-in-the-middle position to impersonate the management device (FortiCloud server or/and in certain conditions, FortiManager), via intercepting the FGFM authentication request between the management device and the managed device

Scoring

Severity

HIGH

CVSS base score

7.1

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C

EPSS probability

0.50%

CWE

CWE-923

Published

2025-04-08

Last modified

2026-03-13

Affected products

• Fortinet FortiProxy
• Fortinet FortiProxy
• Fortinet FortiProxy
• Fortinet FortiProxy
• Fortinet FortiManager
• Fortinet FortiManager
• Fortinet FortiManager
• Fortinet FortiManager

Weakness type

• CWE-923

Related vulnerabilities

• CVE-2026-87734 — An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly...
• CVE-2026-62836 — Azure SQL Managed Instance Elevation of Privilege Vulnerability
• CVE-2026-18655 — Broker Credential and OAuth Token Disclosure in AWS Labs Amazon MQ MCP Server via Prompt Injection
• CVE-2026-23904 — Apache Kyuubi: Unrestricted access via Kyuubi engine-ui proxy
• CVE-2026-63226 — Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. do not implement...
• CVE-2026-8920 — Improper Restriction of Communication Channel to Intended Endpoints and External Control of File...
• CVE-2026-59841 — A improper restriction of communication channel to intended endpoints vulnerability in Fortinet...
• CVE-2026-57028 — Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker

Markdown version · Browse all CVEs