CVE-2024-48886

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Jan 14, 2025
Source updated: Jan 14, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.10, 7.0.0 through 7.0.17, 2.0.0 through 2.0.14, FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3 allows attacker to execute unauthorized code or commands via a brute-force attack.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

FortiOS

Vendor: Fortinet
Product: FortiOS
Platforms: Unknown
Default status: unaffected

FortiOS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.4.0	`affected`	semver	Unavailable	7.4.4	None listed
7.2.0	`affected`	semver	Unavailable	7.2.8	None listed
7.0.0	`affected`	semver	Unavailable	7.0.15	None listed
6.4.0	`affected`	semver	Unavailable	6.4.15	None listed

FortiProxy

Vendor: Fortinet
Product: FortiProxy
Platforms: Unknown
Default status: unaffected

FortiProxy · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.4.0	`affected`	semver	Unavailable	7.4.4	None listed
7.2.0	`affected`	semver	Unavailable	7.2.10	None listed
7.0.0	`affected`	semver	Unavailable	7.0.17	None listed
2.0.0	`affected`	semver	Unavailable	2.0.14	None listed