FortiOS Authentication Bypass Vulnerability Allows Attackers to Bypass LDAP Login

Back Cyberpress

FortiOS Authentication Bypass Vulnerability Allows Attackers to Bypass LDAP Login

Cyberpress • February 11, 2026

Share: View original

Fortinet just dropped a bombshell security alert a nasty bug in its FortiOS firewall software. Tracked as CVE-2026-22153, this high-severity ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

FortiOS CVE-2026-22153 Enables LDAP Authentication Bypass Fortinet disclosed a high-severity authentication bypass vulnerability in FortiOS, tracked as CVE-2026-22153, allowing unauthenticated attackers to bypass LDAP authentication for Agentless VPN or Fortinet Single Sign-On policies. The flaw, classified under CWE-305, resides in the fnbamd daemon and requires specific LDAP server configurations. Organizations using affected versions of FortiOS are at risk. 3 sources 40

Extracted Entities

Companies (1)

CVEs (1)

Platforms (1)