Fortinet FortiAnalyzer SSO authentication bypass (FG-IR-26-060)

critical Nessus Plugin ID 296981

Version 1.3

Jan 28, 2026, 9:04 PM

  • CISA reference
  • CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C")
  • Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available")
  • Plugin metadata

Plugin Feed: 202601282104

Version 1.1

Jan 28, 2026, 8:38 AM

  • New

Plugin Feed: 202601280838

* Changelogs are generally available for changes made after Nov 1, 2022