Medium severity5.3NVD Advisory· Published Aug 12, 2026· Updated Sep 8, 2026
CVE-2026-70466
CVE-2026-70466
Description
A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control via
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1- fortiguard.fortinet.com/psirt/FG-IR-26-157nvdVendor Advisory
News mentions
1- Fortinet Patches Multiple Authentication Vulnerabilities in FortiWeb, FortiManager, and FortiClientCyber Security News · Aug 13, 2026