{"uuid": "11a630cf-8654-4c1f-8da7-dfc56f8724ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://t.me/pphm_HackerNews/2617", "content": "\ud83d\udd34 Fortinet Patches Authentication Flaws in FortiWeb and FortiManager\n\nFortinet on Wednesday announced patches for eight vulnerabilities across its products, including high-severity authentication bugs in FortiWeb and FortiManager.\n\nIn FortiWeb, the company resolved an improper authentication issue impacting deployments configured with specific, non-default settings.\n\nA remote, unauthenticated attacker could exploit the flaw, tracked as CVE-2026-26035, \u201cto log in to the FortiWeb GUI/CLI with a random username and password,\u201d Fortinet explains.\n\nThe weakness is associated with the wildcard setting for administrator accounts, which is disabled by default. When it is enabled, the system will match any username on a remote server with the Remote User account.", "creation_timestamp": "2026-08-22T00:00:09.875898Z"}