CVE-2024-26011

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Nov 12, 2024
Source updated: Oct 22, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.4, FortiManager 7.0.0 through 7.0.11, FortiManager 6.4.0 through 6.4.14, FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.14, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiPortal 6.0.0 through 6.0.14, FortiPortal 5.3 all versions, FortiProxy 7.4.0 through 7.4.3, FortiProxy 7.2.0 through 7.2.9, FortiProxy 7.0.0 through 7.0.16, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions, FortiSwitchManager 7.2.0 through 7.2.3, FortiSwitchManager 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

FortiManager

Vendor: Fortinet
Product: FortiManager
Platforms: Unknown
Default status: unaffected

FortiManager · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.4.0	`affected`	semver	Unavailable	7.4.2	None listed
7.2.0	`affected`	semver	Unavailable	7.2.4	None listed
7.0.0	`affected`	semver	Unavailable	7.0.11	None listed
6.4.0	`affected`	semver	Unavailable	6.4.14	None listed

FortiOS

Vendor: Fortinet
Product: FortiOS
Platforms: Unknown
Default status: unaffected

FortiOS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.4.0	`affected`	semver	Unavailable	7.4.3	None listed
7.2.0	`affected`	semver	Unavailable	7.2.7	None listed
7.0.0	`affected`	semver	Unavailable	7.0.14	None listed
6.4.0	`affected`	semver	Unavailable	6.4.16	None listed
6.2.0	`affected`	semver	Unavailable	6.2.17	None listed
6.0.0	`affected`	semver	Unavailable	6.0.18	None listed

FortiSwitchManager

Vendor: Fortinet
Product: FortiSwitchManager
Platforms: Unknown
Default status: unaffected

FortiSwitchManager · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.2.0	`affected`	semver	Unavailable	7.2.3	None listed
7.0.0	`affected`	semver	Unavailable	7.0.3	None listed

FortiPAM

Vendor: Fortinet
Product: FortiPAM
Platforms: Unknown
Default status: unaffected

FortiPAM · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.2.0	`affected`	Unavailable	Unavailable	Unavailable	None listed
1.1.0	`affected`	semver	Unavailable	1.1.2	None listed
1.0.0	`affected`	semver	Unavailable	1.0.3	None listed

FortiPortal

Vendor: Fortinet
Product: FortiPortal
Platforms: Unknown
Default status: unaffected

FortiPortal · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.0.0	`affected`	semver	Unavailable	6.0.14	None listed
5.3.0	`affected`	semver	Unavailable	5.3.8	None listed

FortiProxy

Vendor: Fortinet
Product: FortiProxy
Platforms: Unknown
Default status: unaffected

FortiProxy · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.4.0	`affected`	semver	Unavailable	7.4.3	None listed
7.2.0	`affected`	semver	Unavailable	7.2.9	None listed
7.0.0	`affected`	semver	Unavailable	7.0.16	None listed
2.0.0	`affected`	semver	Unavailable	2.0.14	None listed
1.2.1	`affected`	semver	Unavailable	1.2.13	None listed
01.02.00	`affected`	Unavailable	Unavailable	Unavailable	None listed
1.1.4	`affected`	semver	Unavailable	1.1.6	None listed
01.01.00	`affected`	semver	Unavailable	01.01.03	None listed
01.00.00	`affected`	semver	Unavailable	01.00.07	None listed