Home Fortinet CVE-2026-22153
Back to Fortinet

CVE-2026-22153

FortiOS - Agentless VPN/FSSO

Fortinet CVSS 8.1 Updated March 16, 2026

Executive Risk Summary

"A critical vulnerability in Fortinet FortiOS may allow an unauthenticated attacker to bypass LDAP authentication, potentially leading to unauthorized access to the network. The vulnerability affects FortiOS versions 7.6.0 through 7.6.4, and is considered high-risk due to the potential for exploitation."

Operational Audit Arsenal

Target Type Firmware
Target Asset FortiOS
Standard Path FortiGate devices

Manual Verification Required

This is a non-Windows asset (Fortinet). Use the target asset details above to verify your version against vendor advisories.

Patch Impact Forecast

Reboot Required Likely

Potential network disruption during firmware update

Internal Work Notes

CVE-2026-22153: FortiOS Authentication Bypass Vulnerability - Update FortiOS to version 7.6.5 or later to mitigate risk

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Scope of Impact

Fortinet Fortios

Original NVD Description

"An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unauthenticated attacker to bypass LDAP authentication of Agentless VPN or FSSO policy, when the remote LDAP server is configured in a specific way."

Related Fortinet Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.