CVE-2026-22572

Name of the Vulnerable Software and Affected Versions Fortinet FortiAnalyzer versions 7.2.2 through 7.6.3 Fortinet FortiManager versions 7.2.2 through 7.6.3 Fortinet FortiManager Cloud versions 7.2.2 through 7.6.3

Description This issue is an authentication bypass that uses an alternate path or channel. An attacker with knowledge of the administrator's password may be able to bypass multifactor authentication checks by submitting multiple crafted requests. The vulnerability affects Fortinet FortiAnalyzer and FortiManager products.

Recommendations FortiAnalyzer versions 7.2.2 through 7.6.3 should be updated. FortiManager versions 7.2.2 through 7.6.3 should be updated. FortiManager Cloud versions 7.2.2 through 7.6.3 should be updated.