Fortinet fortilogd spoofing flaw can disrupt high-availability state
Original title: Authentication bypass by spoofing
CVSSv3 is 8.2 across Analyzer, Manager, and FortiSASE-Sovereign; no versions or exploitation are stated.
Fortinet PSIRT revised FG-IR-26-229 on November 10. An authentication bypass by spoofing in fortilogd may let an attacker disrupt the high-availability state of FortiAnalyzer, FortiAnalyzer Cloud, FortiAnalyzer-BigData, FortiManager, FortiManager Cloud, and FortiSASE-Sovereign. The notice cites CVSSv3 8.2 and CWE-290, without versions, a fix, or exploitation status.
Unconfirmed: Affected versions, a fixed release, and exploitation status are not stated.
- The weakness is CWE-290, authentication bypass by spoofing.
- The component named is fortilogd.
- Stated impact is disruption of the HA state.
- The advisory was revised on November 10, 2026.
Impact: Disrupt high-availability state via spoofed authentication
| Product | Affected |
|---|---|
| Fortinet FortiAnalyzer | — |
| Fortinet FortiAnalyzer Cloud | — |
| Fortinet FortiAnalyzer-BigData | — |
| Fortinet FortiManager | — |
| Fortinet FortiManager Cloud | — |
| Fortinet FortiSASE-Sovereign | — |
- Vendors
- Fortinet
From the original article
CVSSv3 Score: 8. 2 An authentication bypass by spoofing vulnerability (CWE-290) in FortiAnalyzer, FortiAnalyzer Cloud, FortiAnalyzer-BigData, FortiManager, FortiManager Cloud, FortiSASE-Sovereign fortilogd may allow an attacker to disrupt the HA state. Revised on 2026-11-10 00:00:00
fortiguard.fortinet.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.