CVE-2024-50563

9.8 criticalEPSS 0.6%

Critical (9.8) in fortinet. EPSS 0.6% chance of exploitation in the next 30 days.

A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3, FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to execute unauthorized code or commands via a brute-force attack.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-1390
Published: 2025-01-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortianalyzer
fortinet:fortianalyzer_cloud
fortinet:fortimanager
fortinet:fortimanager_cloud

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-221

Check your stack JSON