---
id: CVE-2024-26011
title: >-
  A missing authentication for critical function vulnerability in Fortinet
  FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.4,
  FortiManager 7.0.0 through 7.0.11, FortiManager 6.4.0 through 6.4.14, FortiOS
  7.4.0 through 7.4.…
summary: >-
  A missing authentication for critical function vulnerability in Fortinet
  FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.4,
  FortiManager 7.0.0 through 7.0.11, FortiManager 6.4.0 through 6.4.14, FortiOS
  7.4.0 through 7.4.…
severity: medium
cvss: 5.2
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:F/RL:U/RC:C'
cvssSource: cna
cwe:
  - CWE-306
vendor: Fortinet
product: FortiManager
affected:
  - FortiManager >= 7.4.0 <= 7.4.2
  - FortiManager >= 7.2.0 <= 7.2.4
  - FortiManager >= 7.0.0 <= 7.0.11
  - FortiManager >= 6.4.0 <= 6.4.14
  - FortiOS >= 7.4.0 <= 7.4.3
  - FortiOS >= 7.2.0 <= 7.2.7
  - FortiOS >= 7.0.0 <= 7.0.14
  - FortiOS >= 6.4.0 <= 6.4.16
  - FortiOS >= 6.2.0 <= 6.2.17
  - FortiOS >= 6.0.0 <= 6.0.18
  - FortiSwitchManager >= 7.2.0 <= 7.2.3
  - FortiSwitchManager >= 7.0.0 <= 7.0.3
  - FortiPAM 1.2.0
  - FortiPAM >= 1.1.0 <= 1.1.2
  - FortiPAM >= 1.0.0 <= 1.0.3
  - FortiPortal >= 6.0.0 <= 6.0.14
  - FortiPortal >= 5.3.0 <= 5.3.8
  - FortiProxy >= 7.4.0 <= 7.4.3
  - FortiProxy >= 7.2.0 <= 7.2.9
  - FortiProxy >= 7.0.0 <= 7.0.16
  - FortiProxy >= 2.0.0 <= 2.0.14
  - FortiProxy >= 1.2.1 <= 1.2.13
  - FortiProxy 01.02.00
  - FortiProxy >= 1.1.4 <= 1.1.6
  - FortiProxy >= 01.01.00 <= 01.01.03
  - FortiProxy >= 01.00.00 <= 01.00.07
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2024-11-13T18:44:31.679521Z'
published: '2024-11-12'
updated: '2026-10-22'
sourceUpdated: '2026-10-22T13:48:36.180Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-26011'
references:
  - url: 'https://fortiguard.fortinet.com/psirt/FG-IR-24-032'
    label: 'https://fortiguard.fortinet.com/psirt/FG-IR-24-032'
tags:
  - cve.org
epss: 0.00597
epssPercentile: 0.47892
ingestedAt: '2026-10-22T22:00:50.276Z'
---

## Overview

A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.4, FortiManager 7.0.0 through 7.0.11, FortiManager 6.4.0 through 6.4.14, FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.14, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiPortal 6.0.0 through 6.0.14, FortiPortal 5.3 all versions, FortiProxy 7.4.0 through 7.4.3, FortiProxy 7.2.0 through 7.2.9, FortiProxy 7.0.0 through 7.0.16, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions, FortiSwitchManager 7.2.0 through 7.2.3, FortiSwitchManager 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.

## Affected

- `FortiManager >= 7.4.0 <= 7.4.2`
- `FortiManager >= 7.2.0 <= 7.2.4`
- `FortiManager >= 7.0.0 <= 7.0.11`
- `FortiManager >= 6.4.0 <= 6.4.14`
- `FortiOS >= 7.4.0 <= 7.4.3`
- `FortiOS >= 7.2.0 <= 7.2.7`
- `FortiOS >= 7.0.0 <= 7.0.14`
- `FortiOS >= 6.4.0 <= 6.4.16`
- `FortiOS >= 6.2.0 <= 6.2.17`
- `FortiOS >= 6.0.0 <= 6.0.18`
- `FortiSwitchManager >= 7.2.0 <= 7.2.3`
- `FortiSwitchManager >= 7.0.0 <= 7.0.3`
- `FortiPAM 1.2.0`
- `FortiPAM >= 1.1.0 <= 1.1.2`
- `FortiPAM >= 1.0.0 <= 1.0.3`
- `FortiPortal >= 6.0.0 <= 6.0.14`
- `FortiPortal >= 5.3.0 <= 5.3.8`
- `FortiProxy >= 7.4.0 <= 7.4.3`
- `FortiProxy >= 7.2.0 <= 7.2.9`
- `FortiProxy >= 7.0.0 <= 7.0.16`
- `FortiProxy >= 2.0.0 <= 2.0.14`
- `FortiProxy >= 1.2.1 <= 1.2.13`
- `FortiProxy 01.02.00`
- `FortiProxy >= 1.1.4 <= 1.1.6`
- `FortiProxy >= 01.01.00 <= 01.01.03`
- `FortiProxy >= 01.00.00 <= 01.00.07`

## Remediation

Upgrade to upcoming  FortiAuthenticator version 7.0.0 or above
Upgrade to FortiWeb version 7.6.0 or above
Upgrade to FortiWeb version 7.4.3 or above
Upgrade to FortiVoice version 7.0.2 or above
Upgrade to FortiVoice version 6.4.9 or above
Upgrade to FortiSwitchManager version 7.2.4 or above
Upgrade to FortiSwitchManager version 7.0.4 or above
Upgrade to FortiProxy version 7.4.4 or above
Upgrade to FortiProxy version 7.2.10 or above
Upgrade to FortiProxy version 7.0.17 or above
Upgrade to FortiPortal version 6.0.15 or above
Upgrade to FortiPAM version 1.3.0 or above
Upgrade to FortiOS version 7.6.0 or above
Upgrade to FortiOS version 7.4.4 or above
Upgrade to FortiOS version 7.2.8 or above
Upgrade to FortiOS version 7.0.15 or above
Upgrade to FortiManager version 7.4.3 or above
Upgrade to FortiManager version 7.2.5 or above
Upgrade to FortiManager version 7.0.12 or above
Upgrade to FortiManager version 6.4.15 or above