Executive Risk Summary
"A critical vulnerability in Fortinet FortiAnalyzer and FortiManager products allows an attacker with knowledge of the admin's password to bypass multifactor authentication checks via submitting multiple crafted requests. This vulnerability affects multiple versions of FortiAnalyzer and FortiManager, including FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, and FortiManager 7.6.0 through 7.6.3."
Operational Audit Arsenal
Target Type Firmware
Target Asset FortiAnalyzer Firmware
Standard Path https://fortiguard.fortinet.com/psirt/FG-IR-26-090
Manual Verification Required
This is a non-Windows asset (Fortinet). Use the target asset details and official path provided above to verify your current version against the official vendor advisories listed below.
Patch Impact Forecast
Reboot Required Likely
Moderate to High
Internal Work Notes
CVE-2026-22572: FortiAnalyzer and FortiManager Authentication Bypass Vulnerability - Update to latest firmware version to prevent authentication bypass attacks.
Technical Intelligence & Operational Utilities • Delivered Weekly
Intelligence Sources
Related Fortinet Threats
Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.