FortiManager 7.6 vulnerabilities
6 advisories affect Fortinet FortiManager 7.6, 2 already exploited by attackers. Latest: October 13, 2026.
Running FortiManager 7.6 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on FortiManager 7.6 alerts
Turn on FortiManager 7.6 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| Fortinet: Multiple Arbitrary File Read/Write via SQL Injection FG-IR-26-178 · October 13, 2026 | High 7.9 | from 7.6.0 to 7.6.4; from 7.6.2 to 7.6.4 Fixed in 7.6.5 |
| Fortinet: arbitrary command execution in fgfmsd daemon FG-IR-26-177 · October 13, 2026 | Medium 5.3 | from 7.6.0 to 7.6.6; from 7.6.2 to 7.6.6 Fixed in 7.6.7 |
| Fortinet: Workflow session email approval process bypass FG-IR-26-171 · September 8, 2026 | Medium 4.9 | from 7.6.0 to 7.6.4; from 7.6.2 to 7.6.4 Fixed in 7.6.5 |
| Fortinet: FGFM Authentication Weakening via CLI Configuration FG-IR-26-160 · August 12, 2026 | High 8.1 | 7.6.1 Fixed in 7.6.2 |
| Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2026-24858 · January 27, 2026 | Critical 9.8 Exploited | from 7.6.0 to 7.6.5 |
| Fortinet FortiManager Missing Authentication Vulnerability CVE-2024-47575 · October 23, 2024 | Critical 9.8 Exploited | 7.6.0 |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.