{"metadata": {"vulnerability": "CVE-2026-26035", "count": 31, "kinds": {"milestone": 7, "sighting": 11, "kev": 0, "other": 13}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0300", "record": "NCSC-2026-0300", "field": "document.tracking.generator.date"}, {"timestamp": "2026-02-10T13:04:43.330Z", "date_only": false, "value": "2026-02-10T13:04:43.330Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-26035", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-12T00:00:00Z", "date_only": true, "value": "2026-08-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1015", "record": "CERTFR-2026-AVI-1015", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-08-12T00:00:00Z", "date_only": false, "value": "2026-08-12T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-26035", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-12T00:00:00Z", "date_only": false, "value": "2026-08-12T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-26035", "record": "FKIE_CVE-2026-26035", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-12T12:19:03.031Z", "date_only": false, "value": "2026-08-12T12:19:03.031Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-26035", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-12T12:19:03.031Z", "date_only": false, "value": "2026-08-12T12:19:03.031Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / fortinet", "record": "CVE-2026-26035", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-12T13:17:22Z", "date_only": false, "value": "2026-08-12T13:17:22Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q9J3-5J7M-6W3X", "record": "GHSA-Q9J3-5J7M-6W3X", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-12T13:17:22.307Z", "date_only": false, "value": "2026-08-12T13:17:22.307", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-26035", "record": "FKIE_CVE-2026-26035", "field": "published"}, {"timestamp": "2026-08-12T14:00:39.687Z", "date_only": false, "value": "2026-08-12T14:00:39.687971Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msvc3lbwvq2a", "record": "CVE-2026-26035", "field": "creation_timestamp", "uuid": "28759de9-d42d-4a86-a2dd-8796e6ef022c", "content": "\ud83d\udd34 CVE-2026-26035 - Critical (9.8)\n\nAn Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 throu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-26035/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msvc3lbwvq2a"}, {"timestamp": "2026-08-12T15:30:44Z", "date_only": false, "value": "2026-08-12T15:30:44Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q9J3-5J7M-6W3X", "record": "GHSA-Q9J3-5J7M-6W3X", "field": "published"}, {"timestamp": "2026-08-12T15:30:44Z", "date_only": false, "value": "2026-08-12T15:30:44Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q9J3-5J7M-6W3X", "record": "GHSA-Q9J3-5J7M-6W3X", "field": "modified"}, {"timestamp": "2026-08-13T00:00:00Z", "date_only": false, "value": "2026-08-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1015", "record": "CERTFR-2026-AVI-1015", "field": "last_revision_date"}, {"timestamp": "2026-08-13T00:00:00Z", "date_only": false, "value": "2026-08-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1015", "record": "CERTFR-2026-AVI-1015", "field": "initial_release_date"}, {"timestamp": "2026-08-13T00:00:00Z", "date_only": false, "value": "2026-08-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1015", "record": "CERTFR-2026-AVI-1015", "field": "revisions.0.revision_date"}, {"timestamp": "2026-08-13T03:55:28.475Z", "date_only": false, "value": "2026-08-13T03:55:28.475Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-26035", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-13T03:55:28.475Z", "date_only": false, "value": "2026-08-13T03:55:28.475Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-26035", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-13T06:10:04.750Z", "date_only": false, "value": "2026-08-13T06:10:04.750668Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mswyb2g22323", "record": "CVE-2026-26035", "field": "creation_timestamp", "uuid": "756a2e76-363f-4e58-960f-e73559282739", "content": "CVE-2026-26035 - fortiweb\nAn issue with Fortinet FortiWeb's login system allows unauthorized access to the device's GUI and CLI. This means that an attacker could potentially access the device without a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#fortiweb #fortinet #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mswyb2g22323"}, {"timestamp": "2026-08-13T10:21:45.215Z", "date_only": false, "value": "2026-08-13T10:21:45.215182Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2013", "record": "CVE-2026-26035", "field": "creation_timestamp", "uuid": "5f4cc280-1e57-45de-b7cd-db2c7c5e0ff0", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2013"}, {"timestamp": "2026-08-13T13:26:02.439Z", "date_only": false, "value": "2026-08-13T13:26:02.439473Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0300", "record": "NCSC-2026-0300", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-13T13:26:02.439Z", "date_only": false, "value": "2026-08-13T13:26:02.439473Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0300", "record": "NCSC-2026-0300", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-13T13:26:02.439Z", "date_only": false, "value": "2026-08-13T13:26:02.439473Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0300", "record": "NCSC-2026-0300", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-13T14:00:24.889Z", "date_only": false, "value": "2026-08-13T14:00:24.889849Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msxsk3fzpf2l", "record": "CVE-2026-26035", "field": "creation_timestamp", "uuid": "252c62e1-f6f2-4f04-bfca-00b292027b11", "content": "\ud83d\udd17 CVE : CVE-2026-26035, CVE-2026-49975, CVE-2026-70465, CVE-2026-70466, CVE-2026-70467, CVE-2026-70468, CVE-2026-71407, CVE-2026-71408", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3msxsk3fzpf2l"}, {"timestamp": "2026-08-13T17:01:18.858Z", "date_only": false, "value": "2026-08-13T17:01:18.858844Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3msy4njvlcs27", "record": "CVE-2026-26035", "field": "creation_timestamp", "uuid": "fdc055b9-de5c-4952-b7a8-1dd2d70597f2", "content": "Fortinet dicht kritieke beveiligingslekken in populaire producten.\n\nFortinet heeft meerdere beveiligingslekken gedicht in zijn producten FortiWeb, FortiManager en FortiClient. Het meest ernstige lek, CVE-2026-26035, met een zeer hoge CVSS-score van 8.8 tot 9.8, werd ontdekt in ...", "url": "https://bsky.app/profile/newsfacts.bsky.social/post/3msy4njvlcs27"}, {"timestamp": "2026-08-14T05:24:50.862Z", "date_only": false, "value": "2026-08-14T05:24:50.862485Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mszg73pe3425", "record": "CVE-2026-26035", "field": "creation_timestamp", "uuid": "0793d3e3-f339-46d2-beac-57b0cd0d98f0", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-26035) FortiWeb Admin Authentication Bypass via RADIUS Admin Groups\".\n\n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "url": "https://bsky.app/profile/opsmatters.com/post/3mszg73pe3425"}, {"timestamp": "2026-08-14T08:43:48.246Z", "date_only": false, "value": "2026-08-14T08:43:48.246324Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mszrctr2yn2b", "record": "CVE-2026-26035", "field": "creation_timestamp", "uuid": "3c016886-ee11-4af9-8b9a-50b73664a40c", "content": "FortiWeb Authentication Claims Under Scrutiny: What Organizations Need to Know About CVE-2026-26035 and Fortinet\u2019s Real 2026 Security\u00a0Risks\n\nA Critical Warning for Security Teams A vulnerability in a web application firewall is never an ordinary software flaw. When the security appliance designed\u2026", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3mszrctr2yn2b"}, {"timestamp": "2026-08-14T13:36:23.464Z", "date_only": false, "value": "2026-08-14T13:36:23.464898Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117094126178212024", "record": "CVE-2026-26035", "field": "creation_timestamp", "uuid": "63a43d43-9337-4521-a0ab-d9690f49cfc3", "content": "\ud83d\udcf0 Fortinet patches critical auth bypass in FortiWeb WAF (CVE-2026-26035)\nFortinet patches a critical authentication bypass in FortiWeb WAF (CVE-2026-26035). The flaw allows admin access with any password if a non-default 'admin wildcard' is set. Patch and check your configs now! #Fortinet #CyberSecurity #Vulnerability\n\ud83d\udd17 https://cyber.netsecops.io/articles/fortinet-patches-critical-authentication-bypass-in-fortiweb/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/117094126178212024"}, {"timestamp": "2026-08-14T13:36:45.398Z", "date_only": false, "value": "2026-08-14T13:36:45.398224Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mt2booxqkv22", "record": "CVE-2026-26035", "field": "creation_timestamp", "uuid": "977edab3-10ec-4da5-b5fb-0866de85e67b", "content": "Fortinet patches a critical authentication bypass in FortiWeb WAF (CVE-2026-26035). The flaw allows admin access with any password if a non-default 'admin wildcard' is set. Patch and check your configs now! #Fortinet #CyberSecurity #Vulnerability\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3mt2booxqkv22"}, {"timestamp": "2026-08-16T23:01:59.127Z", "date_only": false, "value": "2026-08-16T23:01:59.127696Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mtac77c2zs2r", "record": "CVE-2026-26035", "field": "creation_timestamp", "uuid": "27099bc8-4e80-4d4e-acb0-75499b8e8c8b", "content": "Fortinet\u3001FortiWeb\u3068FortiManager\u306e\u8a8d\u8a3c\u95a2\u9023 \u8106\u5f31\u6027\u3092\u4fee\u6b63-\u672a\u8a8d\u8a3c\u30ed\u30b0\u30a4\u30f3\u30fbFortiGate\u306a\u308a\u3059\u307e\u3057\u306e\u6050\u308c\uff08CVE-2026-26035\uff0fCVE-2026-70468\uff09 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u8106\u5f31\u6027", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mtac77c2zs2r"}, {"timestamp": "2026-08-21T23:00:06.094Z", "date_only": false, "value": "2026-08-21T23:00:06.094530Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/2617", "record": "CVE-2026-26035", "field": "creation_timestamp", "uuid": "22f2baee-f5a6-4b72-ae5e-4e1066b962db", "content": "\ud83d\udd34 Fortinet Patches Authentication Flaws in FortiWeb and FortiManager\n\nFortinet on Wednesday announced patches for eight vulnerabilities across its products, including high-severity authentication bugs in FortiWeb and FortiManager.\n\nIn FortiWeb, the company resolved an improper authentication issue impacting deployments configured with specific, non-default settings.\n\nA remote, unauthenticated attacker could exploit the flaw, tracked as CVE-2026-26035, \u201cto log in to the FortiWeb GUI/CLI with a random username and password,\u201d Fortinet explains.\n\nThe weakness is associated with the wildcard setting for administrator accounts, which is disabled by default. When it is enabled, the system will match any username on a remote server with the Remote User account.", "url": "https://t.me/pphm_HackerNews/2617"}, {"timestamp": "2026-09-08T21:02:41.893Z", "date_only": false, "value": "2026-09-08T21:02:41.893", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-26035", "record": "FKIE_CVE-2026-26035", "field": "lastModified"}]}