CVSSv3 Score: 5.9 An Improper Authentication vulnerability [CWE-287] in the FortiOS Remote Radius Type Admin Two-Factor (TFA) Authentication may allow a remote authenticated attacker with at least read-only permission to log in to the FortiOS GUI with an invalid token after entering a valid username and password, in scenarios where the RADIUS server returns an additional "Access-Challenge" response following an invalid TFA token. Revised on 2026-11-10 00:00:00
Broken Access Control in Two-Factor-Authentication
About this summary. This is a short excerpt from the description that Fortinet PSIRT published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://fortiguard.fortinet.com/psirt/FG-IR-26-195
Source attribution: headline and facts are from Fortinet PSIRT (fortiguard.fortinet.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Weak Passwords Expose SQL Servers to Cryptominer and Gh0st RAT
Fortinet finds weak SQL Server passwords used to deliver a miner and Gh0st RAT
Fortinet security advisory (AV26-1145)
Serial number: AV26-1145 Date: November 12, 2026 As of November 11, 2026, Fortinet is affected by vulnerabilities in the following products: FortiAnalyzer Prior to 8.0.3…
Fortinet Patches Nearly 100 Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Cloud Vulnerabilities Surge Fourfold in Less Than a Year
AI is amplifying the impact of vulnerabilities, long-lived credentials and other cloud risks, says Datadog
Authentication bypass
CVSSv3 Score: 9.0 A Use of Hard-coded Password [CWE-259] vulnerability in FortiAuthenticator may allow an unauthenticated attacker to bypass credential validation in…
Authentication bypass by primary weakness
CVSSv3 Score: 9.3 An Authentication Bypass by Primary Weakness vulnerability [cwe-305] in FortiOS and FortiSASE ospf daemon may allow an unauthenticated attacker to…