← Back to CVE search

CVE-2026-70466

FortiWeb

Description

A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control via <insert attack vector here>

CVSS 5.3EPSS 0.309%Risk 0.54
View source
Published
2026-08-12 13:17:24
Affected versions
>=8.0.0,<=8.0.2,>=7.6.0,<=7.6.5,>=7.4.0,<=7.4.99,>=7.2.0,<=7.2.99,>=7.0.0,<=7.0.99
Type
Critical software
Last modified
2026-08-26 16:54:50
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N