# CVE-2026-70466

## Summary

- **CVE ID:** CVE-2026-70466
- **Severity:** MEDIUM
- **CVSS Score:** 4.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C)
- **CWE:** CWE-184
- **Published:** Aug 12, 2026
- **Last Modified:** Sep 15, 2026

## Description

A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control via <insert attack vector here>

## Affected Products

- Fortinet — FortiWeb (8.0.0)
- Fortinet — FortiWeb (7.6.0)
- Fortinet — FortiWeb (7.4.0)
- Fortinet — FortiWeb (7.2.0)
- Fortinet — FortiWeb (7.0.0)
- Fortinet — FortiOS (7.6.0)
- Fortinet — FortiOS (7.4.0)
- Fortinet — FortiOS (7.2.0)
- Fortinet — FortiOS (7.0.0)
- Fortinet — FortiOS (6.4.0)

## References

- [CNA](https://fortiguard.fortinet.com/psirt/FG-IR-26-157)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.29%
- **EPSS Percentile:** 22.2

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._