CVE Watch—

CVE-2024-47575

Fortinet FortiManager Missing Authentication Vulnerability

CVSS

—

No CVSS

EPSS

94.8%

p100

KEV

YES

Oct 23, 2024

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

94.8%EPSS · 30 days94.8%

2026-06-302026-07-16

KEV catalog record

Product

Fortinet / FortiManager

Vulnerability

Fortinet FortiManager Missing Authentication Vulnerability

Added to KEV

Oct 23, 2024

Remediate by

Nov 13, 2024

Known ransomware use

Summary description

Fortinet FortiManager contains a missing authentication vulnerability in the fgfmd daemon that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://fortiguard.fortinet.com/psirt/FG-IR-24-423 ; https://nvd.nist.gov/vuln/detail/CVE-2024-47575

Related CVEs

No related CVEs by CWE or product.