CVE-2026-26035

Fortinet FortiWeb versions 8.0.0 to 8.0.2, 7.6.0 to 7.6.6, 7.4.0 to 7.4.11, 7.2.0 to 7.2.12, and 7.0.0 to 7.0.12 are vulnerable to an improper authentication flaw, enabling remote unauthenticated attackers to gain access to the FortiWeb GUI/CLI using any username and password. This critical vulnerability poses a significant risk as it allows unauthorized control over the web application firewall, potentially leading to data breaches or service disruptions. Organizations using affected FortiWeb versions should prioritize immediate patching to mitigate this severe security threat.