https://vulnerability.circl.lu/sightings/feed 2026-09-03T07:54:30.046923+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/6d3a0fb5-d63b-4ae1-a695-58e85723b3cd/export 2026-09-03T07:54:30.075238+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6d3a0fb5-d63b-4ae1-a695-58e85723b3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://t.me/pphm_HackerNews/2617", "content": "\ud83d\udd34 Fortinet Patches Authentication Flaws in FortiWeb and FortiManager\n\nFortinet on Wednesday announced patches for eight vulnerabilities across its products, including high-severity authentication bugs in FortiWeb and FortiManager.\n\nIn FortiWeb, the company resolved an improper authentication issue impacting deployments configured with specific, non-default settings.\n\nA remote, unauthenticated attacker could exploit the flaw, tracked as CVE-2026-26035, \u201cto log in to the FortiWeb GUI/CLI with a random username and password,\u201d Fortinet explains.\n\nThe weakness is associated with the wildcard setting for administrator accounts, which is disabled by default. When it is enabled, the system will match any username on a remote server with the Remote User account.", "creation_timestamp": "2026-08-23T00:00:47.881310Z"} 2026-08-23T00:00:47.881310+00:00 https://vulnerability.circl.lu/sighting/11a630cf-8654-4c1f-8da7-dfc56f8724ff/export 2026-09-03T07:54:30.077524+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "11a630cf-8654-4c1f-8da7-dfc56f8724ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://t.me/pphm_HackerNews/2617", "content": "\ud83d\udd34 Fortinet Patches Authentication Flaws in FortiWeb and FortiManager\n\nFortinet on Wednesday announced patches for eight vulnerabilities across its products, including high-severity authentication bugs in FortiWeb and FortiManager.\n\nIn FortiWeb, the company resolved an improper authentication issue impacting deployments configured with specific, non-default settings.\n\nA remote, unauthenticated attacker could exploit the flaw, tracked as CVE-2026-26035, \u201cto log in to the FortiWeb GUI/CLI with a random username and password,\u201d Fortinet explains.\n\nThe weakness is associated with the wildcard setting for administrator accounts, which is disabled by default. When it is enabled, the system will match any username on a remote server with the Remote User account.", "creation_timestamp": "2026-08-22T00:00:09.875898Z"} 2026-08-22T00:00:09.875898+00:00 https://vulnerability.circl.lu/sighting/22f2baee-f5a6-4b72-ae5e-4e1066b962db/export 2026-09-03T07:54:30.077675+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "22f2baee-f5a6-4b72-ae5e-4e1066b962db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://t.me/pphm_HackerNews/2617", "content": "\ud83d\udd34 Fortinet Patches Authentication Flaws in FortiWeb and FortiManager\n\nFortinet on Wednesday announced patches for eight vulnerabilities across its products, including high-severity authentication bugs in FortiWeb and FortiManager.\n\nIn FortiWeb, the company resolved an improper authentication issue impacting deployments configured with specific, non-default settings.\n\nA remote, unauthenticated attacker could exploit the flaw, tracked as CVE-2026-26035, \u201cto log in to the FortiWeb GUI/CLI with a random username and password,\u201d Fortinet explains.\n\nThe weakness is associated with the wildcard setting for administrator accounts, which is disabled by default. When it is enabled, the system will match any username on a remote server with the Remote User account.", "creation_timestamp": "2026-08-21T23:00:06.094530Z"} 2026-08-21T23:00:06.094530+00:00 https://vulnerability.circl.lu/sighting/27099bc8-4e80-4d4e-acb0-75499b8e8c8b/export 2026-09-03T07:54:30.077786+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "27099bc8-4e80-4d4e-acb0-75499b8e8c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mtac77c2zs2r", "content": "Fortinet\u3001FortiWeb\u3068FortiManager\u306e\u8a8d\u8a3c\u95a2\u9023 \u8106\u5f31\u6027\u3092\u4fee\u6b63-\u672a\u8a8d\u8a3c\u30ed\u30b0\u30a4\u30f3\u30fbFortiGate\u306a\u308a\u3059\u307e\u3057\u306e\u6050\u308c\uff08CVE-2026-26035\uff0fCVE-2026-70468\uff09 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u8106\u5f31\u6027", "creation_timestamp": "2026-08-16T23:01:59.127696Z"} 2026-08-16T23:01:59.127696+00:00 https://vulnerability.circl.lu/sighting/977edab3-10ec-4da5-b5fb-0866de85e67b/export 2026-09-03T07:54:30.077894+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "977edab3-10ec-4da5-b5fb-0866de85e67b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mt2booxqkv22", "content": "Fortinet patches a critical authentication bypass in FortiWeb WAF (CVE-2026-26035). The flaw allows admin access with any password if a non-default 'admin wildcard' is set. Patch and check your configs now! #Fortinet #CyberSecurity #Vulnerability\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-14T13:36:45.398224Z"} 2026-08-14T13:36:45.398224+00:00 https://vulnerability.circl.lu/sighting/63a43d43-9337-4521-a0ab-d9690f49cfc3/export 2026-09-03T07:54:30.077997+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "63a43d43-9337-4521-a0ab-d9690f49cfc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117094126178212024", "content": "\ud83d\udcf0 Fortinet patches critical auth bypass in FortiWeb WAF (CVE-2026-26035)\nFortinet patches a critical authentication bypass in FortiWeb WAF (CVE-2026-26035). The flaw allows admin access with any password if a non-default 'admin wildcard' is set. Patch and check your configs now! #Fortinet #CyberSecurity #Vulnerability\n\ud83d\udd17 https://cyber.netsecops.io/articles/fortinet-patches-critical-authentication-bypass-in-fortiweb/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-14T13:36:23.464898Z"} 2026-08-14T13:36:23.464898+00:00 https://vulnerability.circl.lu/sighting/3c016886-ee11-4af9-8b9a-50b73664a40c/export 2026-09-03T07:54:30.078098+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3c016886-ee11-4af9-8b9a-50b73664a40c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mszrctr2yn2b", "content": "FortiWeb Authentication Claims Under Scrutiny: What Organizations Need to Know About CVE-2026-26035 and Fortinet\u2019s Real 2026 Security\u00a0Risks\n\nA Critical Warning for Security Teams A vulnerability in a web application firewall is never an ordinary software flaw. When the security appliance designed\u2026", "creation_timestamp": "2026-08-14T08:43:48.246324Z"} 2026-08-14T08:43:48.246324+00:00 https://vulnerability.circl.lu/sighting/0793d3e3-f339-46d2-beac-57b0cd0d98f0/export 2026-09-03T07:54:30.078195+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0793d3e3-f339-46d2-beac-57b0cd0d98f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mszg73pe3425", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-26035) FortiWeb Admin Authentication Bypass via RADIUS Admin Groups\".\n\n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-08-14T05:24:50.862485Z"} 2026-08-14T05:24:50.862485+00:00 https://vulnerability.circl.lu/sighting/fdc055b9-de5c-4952-b7a8-1dd2d70597f2/export 2026-09-03T07:54:30.078294+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "fdc055b9-de5c-4952-b7a8-1dd2d70597f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3msy4njvlcs27", "content": "Fortinet dicht kritieke beveiligingslekken in populaire producten.\n\nFortinet heeft meerdere beveiligingslekken gedicht in zijn producten FortiWeb, FortiManager en FortiClient. Het meest ernstige lek, CVE-2026-26035, met een zeer hoge CVSS-score van 8.8 tot 9.8, werd ontdekt in ...", "creation_timestamp": "2026-08-13T17:01:18.858844Z"} 2026-08-13T17:01:18.858844+00:00 https://vulnerability.circl.lu/sighting/252c62e1-f6f2-4f04-bfca-00b292027b11/export 2026-09-03T07:54:30.078390+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "252c62e1-f6f2-4f04-bfca-00b292027b11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msxsk3fzpf2l", "content": "\ud83d\udd17 CVE : CVE-2026-26035, CVE-2026-49975, CVE-2026-70465, CVE-2026-70466, CVE-2026-70467, CVE-2026-70468, CVE-2026-71407, CVE-2026-71408", "creation_timestamp": "2026-08-13T14:00:24.889849Z"} 2026-08-13T14:00:24.889849+00:00