Fortinet Patches Eight Vulnerabilities Across Its Products
Summary
Fortinet patched eight vulnerabilities, including authentication flaws in FortiWeb and FortiManager and a FortiClient for Windows buffer overflow. The company did not report any of the flaws as exploited in the wild.
Key points
- CVE-2026-26035 could let a remote, unauthenticated attacker log in to FortiWeb’s GUI or CLI when a non-default administrator wildcard setting is enabled. Fortinet patched it in versions 8.0.3, 7.6.7, 7.4.12, and 7.2.13; disabling the setting is a workaround.
- CVE-2026-70468 allows remote attackers to impersonate a FortiGate device managed by FortiManager. Exploitation requires a specific CLI option to be enabled and a valid certificate.
- CVE-2026-70465 is a FortiClient for Windows buffer overflow that could enable unauthenticated code execution by an attacker able to modify or craft DNS responses.
- Fortinet also fixed medium- and low-severity defects in FortiWeb WAF, FortiOS, and FortiSIEM, and issued an advisory on CVE-2026-49975, the HTTP/2 Bomb attack affecting Apache HTTP Server.
- Fortinet did not say that any of the vulnerabilities were being exploited in the wild.
Article Details
- Event Type
- Fortinet released patches for eight vulnerabilities across its products, including high-severity authentication flaws.
- Impact
- CVE-2026-26035 could let a remote unauthenticated attacker log in to FortiWeb GUI/CLI when the non-default administrator wildcard setting is enabled. CVE-2026-70468 could let a remote attacker impersonate a FortiGate device managed by FortiManager, subject to a specific CLI option and a valid certificate. CVE-2026-70465 could allow unauthenticated attackers able to modify or craft DNS responses to execute arbitrary code on FortiClient for Windows. Fortinet also addressed other defects and published an advisory on CVE-2026-49975, the HTTP/2 Bomb attack affecting Apache HTTP Server. Fortinet did not report exploitation of these vulnerabilities in the wild.
CVE
CVE-2026-26035A remote, unauthenticated attacker could exploit the flaw, tracked as CVE-2026-26035, “to log in to the FortiWeb GUI/CLI with a random username and password,” Fortinet explains.CVE-2026-49975defects in FortiWeb WAF, FortiOS, and FortiSIEM, and published an advisory detailing the impact of CVE-2026-49975, the HTTP/2 Bomb attack affecting Apache HTTP Server.CVE-2026-70465Fortinet also patched a high-severity buffer overflow bug (CVE-2026-70465) in FortiClient for Windows that could allow unauthenticated attackers who can modify or craft DNS responses to execute arbitrary code.CVE-2026-70468The FortiManager vulnerability, tracked as CVE-2026-70468, is an authentication bypass issue that allows remote attackers to impersonate any FortiGate device managed by FortiManager.
Vendors
Products
Apache HTTP Serverand published an advisory detailing the impact of CVE-2026-49975, the HTTP/2 Bomb attack affecting Apache HTTP Server.FortiClientFortinet also patched a high-severity buffer overflow bug (CVE-2026-70465) in FortiClient for Windows that could allow unauthenticated attackers who can modify or craft DNS responses to execute arbitrary code.FortiManagerFortinet on Wednesday announced patches for eight vulnerabilities across its products, including high-severity authentication bugs in FortiWeb and FortiManager.FortiOSOn Wednesday, the company also resolved medium- and low-severity security defects in FortiWeb WAF, FortiOS, and FortiSIEM, and published an advisory detailing the impact of CVE-2026-49975, the HTTP/2 Bomb attackFortiSIEMthe company also resolved medium- and low-severity security defects in FortiWeb WAF, FortiOS, and FortiSIEM, and published an advisory detailing the impact of CVE-2026-49975, the HTTP/2 Bomb attack affectingFortiWebFortinet on Wednesday announced patches for eight vulnerabilities across its products, including high-severity authentication bugs in FortiWeb and FortiManager.