Detections
Analytics
Fortinet FortiAnalyzer SSO authentication bypass (FG-IR-26-060)
critical Nessus Plugin ID 296981
Language:
Synopsis
Fortinet Firewall is missing one or more security-related updates.Description
The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-060 advisory.- An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiOS, FortiManager, FortiAnalyzer may allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices. (CVE-2026-24858)
- An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager 7.4.0 through 7.4.9, FortiManager 7.2.0 through 7.2.11, FortiManager 7.0.0 through 7.0.15, FortiOS 7.6.0 through 7.6.5, FortiOS 7.4.0 through 7.4.10, FortiOS 7.2.0 through 7.2.12, FortiOS 7.0.0 through 7.0.18 may allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices. (CVE-2026-24858)
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
For 7.4.x, upgrade to FortiAnalyzer version 7.4.10 or later.See Also
Plugin Details
Severity: Critical
ID: 296981
File Name: fortianalyzer_FG-IR-26-060.nasl
Version: 1.3
Type: local
Family: Firewalls
Published: 1/28/2026
Updated: 1/28/2026
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.2
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.3
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2026-24858
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 9.1
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:fortinet:fortianalyzer
Required KB Items: Host/Fortigate/model, Host/Fortigate/version, Settings/ParanoidReport
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 1/27/2026
Vulnerability Publication Date: 1/27/2026
CISA Known Exploited Vulnerability Due Dates: 1/30/2026
Reference Information
CVE: CVE-2026-24858