CVE-2026-121528

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.6.0 through 7.6.4 FortiOS versions 7.4.0 through 7.4.9 FortiOS versions 7.2.0 through 7.2.13

Description Improper certificate validation allows a remote and unauthenticated attacker to execute a Man-in-the-Middle attack on the communication channel between the SSLVPN web portal and the backend destination website.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.