What is CVE-2026-22572?

CVE-2026-22572 is a high-severity vulnerability in Fortinet Fortianalyzer, classified under Authentication Bypass Using an Alternate Path or Channel. CVSS score: 7.2/10. Published 2026-03-10.

How severe is CVE-2026-22572?

High severity. CVSS v3 base score is 7.2 out of 10.

Vulnerability in Fortinet Fortianalyzer

CVE-2026-22572

An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.2 through 7.2.11, FortiManager 7.6.0 through 7.6.3, FortiManager…

EPSS: 0.006 (43.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Fortinet Fortianalyzer — versions 7.6.0, 7.4.0, 7.2.2
Fortinet Fortimanager — versions 7.6.0, 7.4.0, 7.2.2
Fortinet Fortimanager_cloud

Weakness classification (CWE)

CWE-288 — Authentication Bypass Using an Alternate Path or Channel

References

psirt@fortinet.com (Vendor Advisory)

Frequently asked questions

What is CVE-2026-22572?: CVE-2026-22572 is a high-severity vulnerability in Fortinet Fortianalyzer, classified under Authentication Bypass Using an Alternate Path or Channel. CVSS score: 7.2/10. Published 2026-03-10.
How severe is CVE-2026-22572?: High severity. CVSS v3 base score is 7.2 out of 10.