[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7UVK-grZqVChkVvEZfS2jKbMTHX0mAU47Gq2GDjFMPA":3,"g5a-risk:CVE-2024-26009":156},{"success":4,"data":5,"meta":153},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":25,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":52,"references":53,"referencesCount":59,"weaknesses":60,"weaknessesCount":59,"isActivelyExploited":69,"cisaInfo":25,"otxData":25,"relatedBlogPosts":70,"seoMetadata":71,"configurations":96,"relatedVendorCves":144,"notableEvents":145},"CVE-2024-26009","What is CVE-2024-26009?","An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS version 6.4.0 through 6.4.15\tand before 6.2.16, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.8 and before 7.0.15 & FortiPAM before version 1.2.0 allows an unauthenticated attacker to seize control of a managed device via crafted FGFM requests, if the device is managed by a FortiManager, and if the attacker knows that FortiManager's serial number.","An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS version 6.4.0 through 6.4.15 and before 6.2.16, Forti...","2025-08-12T19:15:27.23","2025-08-14T01:13:14.967",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":32,"CVSSMetricV2":33,"CVSSMetricV40":25},[16,28],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"psirt@fortinet.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.9,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},[],[],0.00592,[34,34,34,34,34,34,34],"High",[38,43,46,49],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"fortinet","fortiswitchmanager","*","cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*",{"vendor":39,"product":44,"version":41,"criteria":45,"vulnerable":4},"fortiproxy","cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*",{"vendor":39,"product":47,"version":41,"criteria":48,"vulnerable":4},"fortipam","cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*",{"vendor":39,"product":50,"version":41,"criteria":51,"vulnerable":4},"fortios","cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",4,[54],{"url":55,"source":56,"tags":57},"https:\u002F\u002Ffortiguard.fortinet.com\u002Fpsirt\u002FFG-IR-24-042","Fortinet",[58],"Vendor Advisory",1,[61],{"id":62,"name":63,"description":64,"extendedDescription":65,"status":66,"abstraction":67,"structure":68},"CWE-288","Authentication Bypass Using an Alternate Path or Channel","A product requires authentication, but the product has an alternate path or channel that does not require authentication.","","Incomplete","Base","Simple",false,[],{"title":72,"metaDescription":73,"keywords":74,"canonicalUrl":75,"structuredData":76},"What is CVE-2024-26009? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-26009, a high severity cyber security vulnerability from 2025. An authentication bypass using an alternate path or channel...","CVE-2024-26009, CVE-2024-26009 vulnerability, CVE-2024-26009 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, fortinet security, fortiswitchmanager vulnerability, fortiproxy vulnerability, fortipam vulnerability, fortios vulnerability","\u002Fwhat-is\u002Fcve-2024-26009",{"@context":77,"@type":78,"headline":72,"description":73,"datePublished":10,"dateModified":11,"author":79,"publisher":83,"about":87,"mainEntityOfPage":91,"articleSection":94,"keywords":95},"https:\u002F\u002Fschema.org","TechArticle",{"@type":80,"name":81,"url":82},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":80,"name":81,"url":82,"logo":84},{"@type":85,"url":86},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":88,"name":6,"description":89,"additionalType":90},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":92,"@id":93},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-26009","Cybersecurity","CVE-2024-26009, CVE-2024-26009 vulnerability, CVE-2024-26009 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[97,110,124,132],{"Operator":25,"Negate":25,"Nodes":98},[99],{"Operator":100,"Negate":69,"CPEMatch":101},"OR",[102,106],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":103,"VersionStartExcluding":25,"VersionStartIncluding":104,"VersionEndExcluding":105,"VersionEndIncluding":25},"7A020C2E-1DDB-4737-92D9-B125FFBE007A","7.0.0","7.0.4",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":107,"VersionStartExcluding":25,"VersionStartIncluding":108,"VersionEndExcluding":109,"VersionEndIncluding":25},"EB0D2553-E4E6-454A-80F6-9D014A4710D3","7.2.0","7.2.4",{"Operator":25,"Negate":25,"Nodes":111},[112],{"Operator":100,"Negate":69,"CPEMatch":113},[114,117,120],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":115,"VersionStartExcluding":25,"VersionStartIncluding":104,"VersionEndExcluding":116,"VersionEndIncluding":25},"D14FBA88-C364-4911-BBE8-E289139BF1AF","7.0.16",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":118,"VersionStartExcluding":25,"VersionStartIncluding":108,"VersionEndExcluding":119,"VersionEndIncluding":25},"DF62C95E-AB35-4A8E-84F8-5197E9D33C21","7.2.9",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":121,"VersionStartExcluding":25,"VersionStartIncluding":122,"VersionEndExcluding":123,"VersionEndIncluding":25},"4A077234-F19C-4E87-A7A5-A266B5C903C7","7.4.0","7.4.3",{"Operator":25,"Negate":25,"Nodes":125},[126],{"Operator":100,"Negate":69,"CPEMatch":127},[128],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":129,"VersionStartExcluding":25,"VersionStartIncluding":130,"VersionEndExcluding":25,"VersionEndIncluding":131},"133A320C-2C5A-4E9D-A433-6C24F71A5FB0","1.0.0","1.2.0",{"Operator":25,"Negate":25,"Nodes":133},[134],{"Operator":100,"Negate":69,"CPEMatch":135},[136,140],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":137,"VersionStartExcluding":25,"VersionStartIncluding":138,"VersionEndExcluding":139,"VersionEndIncluding":25},"10332526-9457-4D1B-8AC1-60D6F7E749AF","6.0.0","6.2.17",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":141,"VersionStartExcluding":25,"VersionStartIncluding":142,"VersionEndExcluding":143,"VersionEndIncluding":25},"B481963F-0415-42C8-BB38-C1A8BDF4B9F7","6.4.0","6.4.16",[],[146],{"id":147,"eventType":148,"eventTime":149,"details":150,"label":151,"color":152},"b3d12fad-7654-4a07-9d5f-7b98c58e4273","NEW_NVD","2025-08-13T04:01:11.547897+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":154,"version":155},1792356176876,"2.0",{"score":157,"band":158,"action":159,"scoredAt":160},47,"Medium","Plan remediation","2026-10-16T07:08:25.32633+00:00"]