PT-2026-47810 · Fortinet · Fortiportal

Published 2026-06-09 · Updated 2026-06-09 · CVE-2026-49938

Mitre

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, FortiPortal 7.0 all versions may allow attacker to improper access control via

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-49938

Affected Products

Fortiportal

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-49938 · Security Note
• https://fortiguard.fortinet.com/psirt/FG-IR-26-140 · Note