CVE-2026-70466

—

CVSS 3.1

5.3 medium

EPSS

<1%p22

Published

Aug 12, 2026 (Aug 12, 2026)

Modified

Sep 8, 2026

Description

A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control via

Vendors: fortinet
Products: fortiweb
Weakness: CWE-184
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.