Product:
FortiOS
Summary
An Authentication Bypass by Primary Weakness vulnerability exists in Fortinet FortiOS versions 7.6.0 through 7.6.4. This vulnerability may allow an unauthenticated attacker to bypass LDAP authentication of Agentless VPN or FSSO policy under specific configurations of the remote LDAP server.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.1 | CVE-2026-22153 |
Exploitation
To exploit this vulnerability, an attacker must have access to the network where the FortiOS device is deployed. By manipulating the LDAP server configuration, the attacker can bypass the authentication mechanism, allowing unauthorized access to the Agentless VPN or FSSO policy functionalities.
Affected Products
- FortiOS 7.6.0: Vulnerable to LDAP authentication bypass when configured improperly.
- FortiOS 7.6.1: Same vulnerability as 7.6.0, with similar conditions for exploitation.
- FortiOS 7.6.2: Continues to be affected by the authentication bypass issue.
- FortiOS 7.6.3: Vulnerability persists, allowing potential unauthorized access.
- FortiOS 7.6.4: Last version in the affected range, still vulnerable under specific LDAP configurations.
Mitigation
To mitigate this vulnerability, it is recommended to review and adjust the LDAP server configurations to ensure they do not allow for authentication bypass. Additionally, upgrading to a patched version of FortiOS that addresses this vulnerability is crucial for maintaining security.