CVE-2026-22629

Name of the Vulnerable Software and Affected Versions Fortinet FortiAnalyzer versions 6.4 through 7.6.4 Fortinet FortiManager versions 6.4 through 7.6.4 Fortinet FortiAnalyzer Cloud versions 6.4 through 7.6.4 Fortinet FortiManager Cloud versions 6.4 through 7.6.4

Description The issue involves an insufficient restriction of excessive authentication attempts. This can allow an attacker to bypass brute-force protections by exploiting race conditions. The exploitation of race conditions increases the complexity of practical exploitation.

Recommendations Fortinet FortiAnalyzer versions 6.4 through 7.6.4: Update to a newer version that addresses this issue. Fortinet FortiManager versions 6.4 through 7.6.4: Update to a newer version that addresses this issue. Fortinet FortiAnalyzer Cloud versions 6.4 through 7.6.4: Update to a newer version that addresses this issue. Fortinet FortiManager Cloud versions 6.4 through 7.6.4: Update to a newer version that addresses this issue.