CVE-2026-22153

An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unauthenticated attacker to bypass LDAP authentication of Agentless VPN or FSSO policy, when the remote LDAP server is configured in a specific way.

An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unauthenticated attacker to bypass LDAP authentication of Agentless VPN or FSSO policy, when the remote LDAP server is configured in a specific way.

Una vulnerabilidad de omisión de autenticación por debilidad primaria [CWE-305] en Fortinet FortiOS 7.6.0 hasta 7.6.4 podría permitir a un atacante no autenticado omitir la autenticación LDAP de la política de VPN sin agente o FSSO, cuando el servidor LDAP remoto está configurado de una manera específica.