Gbhackers

FortiOS CVE-2026-22153 Enables LDAP Authentication Bypass

First seen 11 Feb 2026, 12:26 UTC • Cybersecuritynews

•40.4

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Fortinet disclosed a high-severity authentication bypass vulnerability in FortiOS, tracked as CVE-2026-22153, allowing unauthenticated attackers to bypass LDAP authentication for Agentless VPN or Fortinet Single Sign-On policies. The flaw, classified under CWE-305, resides in the fnbamd daemon and requires specific LDAP server configurations. Organizations using affected versions of FortiOS are at risk.

How this analysis works

Timeline

2026-02-10

CVE-2026-22153 published

2026-02-11

Fortinet discloses vulnerability details

Attack Flow

Continue Reading

Exploitation of FortiGate SSO Vulnerabilities by Threat Actors Critical Command Injection Vulnerability in Arista VeloCloud Orchestrator Under Active Exploitation GRU Compromises Home Routers in 23 States to Steal Outlook Credentials FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation Critical Check Point VPN Vulnerability Exploited by Ransomware Gang Widespread DNS Poisoning Campaign Targets Hotel Wi-Fi to Steal Credentials

FortiOS CVE-2026-22153 Enables LDAP Authentication Bypass

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading