FortinetFortiManager

FortiManager 7.2 vulnerabilities

5 advisories affect Fortinet FortiManager 7.2, 2 already exploited by attackers. Latest: October 13, 2026.

Running FortiManager 7.2 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on FortiManager 7.2 alerts
VulnerabilitySeverityAffected versions
Fortinet: Multiple Arbitrary File Read/Write via SQL Injection
FG-IR-26-178 · October 13, 2026
High 7.9all versions 7.2
Fortinet: Workflow session email approval process bypass
FG-IR-26-171 · September 8, 2026
Medium 4.9all versions 7.2
Fortinet: FGFM Authentication Weakening via CLI Configuration
FG-IR-26-160 · August 12, 2026
High 8.1from 7.2.5 to 7.2.9
Fixed in 7.2.10
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
CVE-2026-24858 · January 27, 2026
Critical 9.8 Exploitedfrom 7.2.0 to 7.2.11
Fortinet FortiManager Missing Authentication Vulnerability
CVE-2024-47575 · October 23, 2024
Critical 9.8 Exploitedfrom 7.2.0 to 7.2.7

Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.

Other FortiManager versions: 7.6 · 7.4 · 7.0