https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 03 Sep 2026 07:54:29 +0000 https://vulnerability.circl.lu/sighting/6d3a0fb5-d63b-4ae1-a695-58e85723b3cd/export {"uuid": "6d3a0fb5-d63b-4ae1-a695-58e85723b3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://t.me/pphm_HackerNews/2617", "content": "\ud83d\udd34 Fortinet Patches Authentication Flaws in FortiWeb and FortiManager\n\nFortinet on Wednesday announced patches for eight vulnerabilities across its products, including high-severity authentication bugs in FortiWeb and FortiManager.\n\nIn FortiWeb, the company resolved an improper authentication issue impacting deployments configured with specific, non-default settings.\n\nA remote, unauthenticated attacker could exploit the flaw, tracked as CVE-2026-26035, \u201cto log in to the FortiWeb GUI/CLI with a random username and password,\u201d Fortinet explains.\n\nThe weakness is associated with the wildcard setting for administrator accounts, which is disabled by default. When it is enabled, the system will match any username on a remote server with the Remote User account.", "creation_timestamp": "2026-08-23T00:00:47.881310Z"} {"uuid": "6d3a0fb5-d63b-4ae1-a695-58e85723b3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://t.me/pphm_HackerNews/2617", "content": "\ud83d\udd34 Fortinet Patches Authentication Flaws in FortiWeb and FortiManager\n\nFortinet on Wednesday announced patches for eight vulnerabilities across its products, including high-severity authentication bugs in FortiWeb and FortiManager.\n\nIn FortiWeb, the company resolved an improper authentication issue impacting deployments configured with specific, non-default settings.\n\nA remote, unauthenticated attacker could exploit the flaw, tracked as CVE-2026-26035, \u201cto log in to the FortiWeb GUI/CLI with a random username and password,\u201d Fortinet explains.\n\nThe weakness is associated with the wildcard setting for administrator accounts, which is disabled by default. When it is enabled, the system will match any username on a remote server with the Remote User account.", "creation_timestamp": "2026-08-23T00:00:47.881310Z"} https://vulnerability.circl.lu/sighting/6d3a0fb5-d63b-4ae1-a695-58e85723b3cd/export Sun, 23 Aug 2026 00:00:47 +0000 https://vulnerability.circl.lu/sighting/11a630cf-8654-4c1f-8da7-dfc56f8724ff/export {"uuid": "11a630cf-8654-4c1f-8da7-dfc56f8724ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://t.me/pphm_HackerNews/2617", "content": "\ud83d\udd34 Fortinet Patches Authentication Flaws in FortiWeb and FortiManager\n\nFortinet on Wednesday announced patches for eight vulnerabilities across its products, including high-severity authentication bugs in FortiWeb and FortiManager.\n\nIn FortiWeb, the company resolved an improper authentication issue impacting deployments configured with specific, non-default settings.\n\nA remote, unauthenticated attacker could exploit the flaw, tracked as CVE-2026-26035, \u201cto log in to the FortiWeb GUI/CLI with a random username and password,\u201d Fortinet explains.\n\nThe weakness is associated with the wildcard setting for administrator accounts, which is disabled by default. When it is enabled, the system will match any username on a remote server with the Remote User account.", "creation_timestamp": "2026-08-22T00:00:09.875898Z"} {"uuid": "11a630cf-8654-4c1f-8da7-dfc56f8724ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://t.me/pphm_HackerNews/2617", "content": "\ud83d\udd34 Fortinet Patches Authentication Flaws in FortiWeb and FortiManager\n\nFortinet on Wednesday announced patches for eight vulnerabilities across its products, including high-severity authentication bugs in FortiWeb and FortiManager.\n\nIn FortiWeb, the company resolved an improper authentication issue impacting deployments configured with specific, non-default settings.\n\nA remote, unauthenticated attacker could exploit the flaw, tracked as CVE-2026-26035, \u201cto log in to the FortiWeb GUI/CLI with a random username and password,\u201d Fortinet explains.\n\nThe weakness is associated with the wildcard setting for administrator accounts, which is disabled by default. When it is enabled, the system will match any username on a remote server with the Remote User account.", "creation_timestamp": "2026-08-22T00:00:09.875898Z"} https://vulnerability.circl.lu/sighting/11a630cf-8654-4c1f-8da7-dfc56f8724ff/export Sat, 22 Aug 2026 00:00:09 +0000 https://vulnerability.circl.lu/sighting/22f2baee-f5a6-4b72-ae5e-4e1066b962db/export {"uuid": "22f2baee-f5a6-4b72-ae5e-4e1066b962db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://t.me/pphm_HackerNews/2617", "content": "\ud83d\udd34 Fortinet Patches Authentication Flaws in FortiWeb and FortiManager\n\nFortinet on Wednesday announced patches for eight vulnerabilities across its products, including high-severity authentication bugs in FortiWeb and FortiManager.\n\nIn FortiWeb, the company resolved an improper authentication issue impacting deployments configured with specific, non-default settings.\n\nA remote, unauthenticated attacker could exploit the flaw, tracked as CVE-2026-26035, \u201cto log in to the FortiWeb GUI/CLI with a random username and password,\u201d Fortinet explains.\n\nThe weakness is associated with the wildcard setting for administrator accounts, which is disabled by default. When it is enabled, the system will match any username on a remote server with the Remote User account.", "creation_timestamp": "2026-08-21T23:00:06.094530Z"} {"uuid": "22f2baee-f5a6-4b72-ae5e-4e1066b962db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://t.me/pphm_HackerNews/2617", "content": "\ud83d\udd34 Fortinet Patches Authentication Flaws in FortiWeb and FortiManager\n\nFortinet on Wednesday announced patches for eight vulnerabilities across its products, including high-severity authentication bugs in FortiWeb and FortiManager.\n\nIn FortiWeb, the company resolved an improper authentication issue impacting deployments configured with specific, non-default settings.\n\nA remote, unauthenticated attacker could exploit the flaw, tracked as CVE-2026-26035, \u201cto log in to the FortiWeb GUI/CLI with a random username and password,\u201d Fortinet explains.\n\nThe weakness is associated with the wildcard setting for administrator accounts, which is disabled by default. When it is enabled, the system will match any username on a remote server with the Remote User account.", "creation_timestamp": "2026-08-21T23:00:06.094530Z"} https://vulnerability.circl.lu/sighting/22f2baee-f5a6-4b72-ae5e-4e1066b962db/export Fri, 21 Aug 2026 23:00:06 +0000 https://vulnerability.circl.lu/sighting/27099bc8-4e80-4d4e-acb0-75499b8e8c8b/export {"uuid": "27099bc8-4e80-4d4e-acb0-75499b8e8c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mtac77c2zs2r", "content": "Fortinet\u3001FortiWeb\u3068FortiManager\u306e\u8a8d\u8a3c\u95a2\u9023 \u8106\u5f31\u6027\u3092\u4fee\u6b63-\u672a\u8a8d\u8a3c\u30ed\u30b0\u30a4\u30f3\u30fbFortiGate\u306a\u308a\u3059\u307e\u3057\u306e\u6050\u308c\uff08CVE-2026-26035\uff0fCVE-2026-70468\uff09 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u8106\u5f31\u6027", "creation_timestamp": "2026-08-16T23:01:59.127696Z"} {"uuid": "27099bc8-4e80-4d4e-acb0-75499b8e8c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mtac77c2zs2r", "content": "Fortinet\u3001FortiWeb\u3068FortiManager\u306e\u8a8d\u8a3c\u95a2\u9023 \u8106\u5f31\u6027\u3092\u4fee\u6b63-\u672a\u8a8d\u8a3c\u30ed\u30b0\u30a4\u30f3\u30fbFortiGate\u306a\u308a\u3059\u307e\u3057\u306e\u6050\u308c\uff08CVE-2026-26035\uff0fCVE-2026-70468\uff09 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u8106\u5f31\u6027", "creation_timestamp": "2026-08-16T23:01:59.127696Z"} https://vulnerability.circl.lu/sighting/27099bc8-4e80-4d4e-acb0-75499b8e8c8b/export Sun, 16 Aug 2026 23:01:59 +0000 https://vulnerability.circl.lu/sighting/977edab3-10ec-4da5-b5fb-0866de85e67b/export {"uuid": "977edab3-10ec-4da5-b5fb-0866de85e67b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mt2booxqkv22", "content": "Fortinet patches a critical authentication bypass in FortiWeb WAF (CVE-2026-26035). The flaw allows admin access with any password if a non-default 'admin wildcard' is set. Patch and check your configs now! #Fortinet #CyberSecurity #Vulnerability\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-14T13:36:45.398224Z"} {"uuid": "977edab3-10ec-4da5-b5fb-0866de85e67b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mt2booxqkv22", "content": "Fortinet patches a critical authentication bypass in FortiWeb WAF (CVE-2026-26035). The flaw allows admin access with any password if a non-default 'admin wildcard' is set. Patch and check your configs now! #Fortinet #CyberSecurity #Vulnerability\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-14T13:36:45.398224Z"} https://vulnerability.circl.lu/sighting/977edab3-10ec-4da5-b5fb-0866de85e67b/export Fri, 14 Aug 2026 13:36:45 +0000 https://vulnerability.circl.lu/sighting/63a43d43-9337-4521-a0ab-d9690f49cfc3/export {"uuid": "63a43d43-9337-4521-a0ab-d9690f49cfc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117094126178212024", "content": "\ud83d\udcf0 Fortinet patches critical auth bypass in FortiWeb WAF (CVE-2026-26035)\nFortinet patches a critical authentication bypass in FortiWeb WAF (CVE-2026-26035). The flaw allows admin access with any password if a non-default 'admin wildcard' is set. Patch and check your configs now! #Fortinet #CyberSecurity #Vulnerability\n\ud83d\udd17 https://cyber.netsecops.io/articles/fortinet-patches-critical-authentication-bypass-in-fortiweb/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-14T13:36:23.464898Z"} {"uuid": "63a43d43-9337-4521-a0ab-d9690f49cfc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117094126178212024", "content": "\ud83d\udcf0 Fortinet patches critical auth bypass in FortiWeb WAF (CVE-2026-26035)\nFortinet patches a critical authentication bypass in FortiWeb WAF (CVE-2026-26035). The flaw allows admin access with any password if a non-default 'admin wildcard' is set. Patch and check your configs now! #Fortinet #CyberSecurity #Vulnerability\n\ud83d\udd17 https://cyber.netsecops.io/articles/fortinet-patches-critical-authentication-bypass-in-fortiweb/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-14T13:36:23.464898Z"} https://vulnerability.circl.lu/sighting/63a43d43-9337-4521-a0ab-d9690f49cfc3/export Fri, 14 Aug 2026 13:36:23 +0000 https://vulnerability.circl.lu/sighting/3c016886-ee11-4af9-8b9a-50b73664a40c/export {"uuid": "3c016886-ee11-4af9-8b9a-50b73664a40c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mszrctr2yn2b", "content": "FortiWeb Authentication Claims Under Scrutiny: What Organizations Need to Know About CVE-2026-26035 and Fortinet\u2019s Real 2026 Security\u00a0Risks\n\nA Critical Warning for Security Teams A vulnerability in a web application firewall is never an ordinary software flaw. When the security appliance designed\u2026", "creation_timestamp": "2026-08-14T08:43:48.246324Z"} {"uuid": "3c016886-ee11-4af9-8b9a-50b73664a40c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mszrctr2yn2b", "content": "FortiWeb Authentication Claims Under Scrutiny: What Organizations Need to Know About CVE-2026-26035 and Fortinet\u2019s Real 2026 Security\u00a0Risks\n\nA Critical Warning for Security Teams A vulnerability in a web application firewall is never an ordinary software flaw. When the security appliance designed\u2026", "creation_timestamp": "2026-08-14T08:43:48.246324Z"} https://vulnerability.circl.lu/sighting/3c016886-ee11-4af9-8b9a-50b73664a40c/export Fri, 14 Aug 2026 08:43:48 +0000 https://vulnerability.circl.lu/sighting/0793d3e3-f339-46d2-beac-57b0cd0d98f0/export {"uuid": "0793d3e3-f339-46d2-beac-57b0cd0d98f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mszg73pe3425", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-26035) FortiWeb Admin Authentication Bypass via RADIUS Admin Groups\".\n\n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-08-14T05:24:50.862485Z"} {"uuid": "0793d3e3-f339-46d2-beac-57b0cd0d98f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mszg73pe3425", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-26035) FortiWeb Admin Authentication Bypass via RADIUS Admin Groups\".\n\n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-08-14T05:24:50.862485Z"} https://vulnerability.circl.lu/sighting/0793d3e3-f339-46d2-beac-57b0cd0d98f0/export Fri, 14 Aug 2026 05:24:50 +0000 https://vulnerability.circl.lu/sighting/fdc055b9-de5c-4952-b7a8-1dd2d70597f2/export {"uuid": "fdc055b9-de5c-4952-b7a8-1dd2d70597f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3msy4njvlcs27", "content": "Fortinet dicht kritieke beveiligingslekken in populaire producten.\n\nFortinet heeft meerdere beveiligingslekken gedicht in zijn producten FortiWeb, FortiManager en FortiClient. Het meest ernstige lek, CVE-2026-26035, met een zeer hoge CVSS-score van 8.8 tot 9.8, werd ontdekt in ...", "creation_timestamp": "2026-08-13T17:01:18.858844Z"} {"uuid": "fdc055b9-de5c-4952-b7a8-1dd2d70597f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3msy4njvlcs27", "content": "Fortinet dicht kritieke beveiligingslekken in populaire producten.\n\nFortinet heeft meerdere beveiligingslekken gedicht in zijn producten FortiWeb, FortiManager en FortiClient. Het meest ernstige lek, CVE-2026-26035, met een zeer hoge CVSS-score van 8.8 tot 9.8, werd ontdekt in ...", "creation_timestamp": "2026-08-13T17:01:18.858844Z"} https://vulnerability.circl.lu/sighting/fdc055b9-de5c-4952-b7a8-1dd2d70597f2/export Thu, 13 Aug 2026 17:01:18 +0000 https://vulnerability.circl.lu/sighting/252c62e1-f6f2-4f04-bfca-00b292027b11/export {"uuid": "252c62e1-f6f2-4f04-bfca-00b292027b11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msxsk3fzpf2l", "content": "\ud83d\udd17 CVE : CVE-2026-26035, CVE-2026-49975, CVE-2026-70465, CVE-2026-70466, CVE-2026-70467, CVE-2026-70468, CVE-2026-71407, CVE-2026-71408", "creation_timestamp": "2026-08-13T14:00:24.889849Z"} {"uuid": "252c62e1-f6f2-4f04-bfca-00b292027b11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26035", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msxsk3fzpf2l", "content": "\ud83d\udd17 CVE : CVE-2026-26035, CVE-2026-49975, CVE-2026-70465, CVE-2026-70466, CVE-2026-70467, CVE-2026-70468, CVE-2026-71407, CVE-2026-71408", "creation_timestamp": "2026-08-13T14:00:24.889849Z"} https://vulnerability.circl.lu/sighting/252c62e1-f6f2-4f04-bfca-00b292027b11/export Thu, 13 Aug 2026 14:00:24 +0000