cvedb.io
CVE-2026-22153
HIGH · CVSS 8.1
EPSS exploitation probability: 0%
Published 2026-02-10T16:16:11.050 · Last modified 2026-06-17T10:19:27.010

Summary

An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unauthenticated attacker to bypass LDAP authentication of Agentless VPN or FSSO policy, when the remote LDAP server is configured in a specific way.

Affected products

fortinet — fortios

Does this affect you?

Add your gear to cvedb and we'll alert you only when fortinet ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.