CVE-2026-24017 - Vulnerability Analysis

Overview

Fortinet FortiWeb 7.0.0 through 7.0.11, 7.2.0 through 7.2.11, 7.4.0 through 7.4.10, 7.6.0 through 7.6.5, and 8.0.0 through 8.0.2 contain an authentication rate-limit bypass caused by improper control of interaction frequency, letting remote unauthenticated attackers bypass rate limits via crafted requests, exploit requires attacker resources and target password complexity.

Severity & Score

Impact

Remote attackers can bypass authentication rate limits, increasing the risk of brute force attacks and unauthorized access.

Mitigation

Update to the latest FortiWeb version beyond 8.0.2 or respective fixed versions.

References

• https://fortiguard.fortinet.com/psirt/FG-IR-26-082

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner