Back www.fortiguard.com

CVE-2026-26035

www.fortiguard.com • August 14, 2026

An Improper Authentication vulnerability [CWE-287] in the FortiWeb Remote Radius Type Admin Authentication configured with specific, non-default settings may allow a remote unauthenticated attacker to login into the Fortiweb GUI/CLI with a random username and password

If enabled (non default), disable the Wildcard setting for the Administrators

In the GUI: Go to System > Administrators, edit the Remote Type administrator account that has the Wildcard option enabled, and disable the Wildcard option.

In the CLI: config system admin edit set wildcard disable end

2026-08-12: Initial publication

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Fortinet Products Allow Unauthorized Access Fortinet has disclosed multiple vulnerabilities affecting its products, including FortiWeb, FortiManager, and FortiClientWindows. The most critical, CVE-2026-26035, allows remote unauthenticated access to FortiWeb instances if the wildcard option is enabled. Other vulnerabilities, CVE-2026-70468 and CVE-2026-70465, also pose significant risks, permitting unauthorized access under specific conditions. Patches have been released for affected versions, including 7.2.13, 7.4.12, 7.6.7, and 8.0.3 for FortiWeb. Administrators are advised to apply these patches promptly, as these products are often central to corporate networks. The vulnerabilities were published on August 12, 2026, and there are currently no reports of active exploitation. However, the potential for serious breaches remains high, prompting urgent action from security teams. 1 sources 72

Extracted Entities

CVE-2026-26035

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Vulnerabilities (1)