VULNERABILITY INTELLIGENCE
CVE-2026-22575
CVSS score4.9 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2026-09-08
Last modified2026-09-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Description
An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.4.1 through 7.4.10, FortiManager Cloud 7.2 all versions may allow an administrator to bypass the approval process for workflow sessions via crafted HTTP or HTTPs requests.
Weakness classification
- psirt@fortinet.com: CWE-284