CVSSv3 Score: 9.0 A Use of Hard-coded Password [CWE-259] vulnerability in FortiAuthenticator may allow an unauthenticated attacker to bypass credential validation in certain circumstances outside of the attacker's control and gain unauthorized access. Revised on 2026-11-10 00:00:00
Authentication bypass
About this summary. This is a short excerpt from the description that Fortinet PSIRT published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://fortiguard.fortinet.com/psirt/FG-IR-26-271
Source attribution: headline and facts are from Fortinet PSIRT (fortiguard.fortinet.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Cloud Vulnerabilities Surge Fourfold in Less Than a Year
AI is amplifying the impact of vulnerabilities, long-lived credentials and other cloud risks, says Datadog
Broken Access Control in Two-Factor-Authentication
CVSSv3 Score: 5.9 An Improper Authentication vulnerability [CWE-287] in the FortiOS Remote Radius Type Admin Two-Factor (TFA) Authentication may allow a remote…
FGFM elevation before registration password is verified
CVSSv3 Score: 9.0 An improper authorization vulnerability in FortiManager FGFM may allow an unauthenticated attacker that can reach the FGFM port to execute code or…
HashiCorp security advisory (AV26-1106)
Serial Number: AV26-1106 Date: October 30, 2026 As of October 29, 2026, HashiCorp is affected by vulnerabilities in the following products: Nomad Prior to 2.1.0 Nomad…
Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers
A flaw in Broadcom's Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing…
n8n security advisory (AV26-1044)
Serial number: AV26-1044 Date: October 15, 2026 As of October 14, 2026, n8n is affected by vulnerabilities in the following product: n8n Prior to 1.123.83 Prior to…