Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Fortinet | FortiPortal | unaffected |
|
Configuration 1 [-]
|
No data.
| Vendor | Product | Confidence | Versions | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Fortinet | Fortiportal | 95% |
|
Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .
Vendor Solution
Upgrade to FortiPortal version 7.4.8 or above Upgrade to upcoming FortiPortal version 7.2.9 or above
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-26-140 |
|
Thu, 11 Jun 2026 21:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:* |
Tue, 09 Jun 2026 16:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Improper Access Control in FortiPortal Allowing Unauthorized Access |
Tue, 09 Jun 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, FortiPortal 7.0 all versions may allow attacker to improper access control via <insert attack vector here> | |
| First Time appeared |
Fortinet
Fortinet fortiportal |
|
| Weaknesses | CWE-284 | |
| CPEs | cpe:2.3:a:fortinet:fortiportal:7.0.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.0.10:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.0.11:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.0.12:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.0.13:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.0.14:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.0.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.0.2:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.0.3:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.0.4:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.0.5:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.0.6:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.0.7:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.0.8:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.0.9:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.2.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.2.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.2.2:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.2.3:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.2.4:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.2.5:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.2.6:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.2.7:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.2.8:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.4.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.4.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.4.2:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.4.3:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.4.4:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.4.5:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.4.6:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiportal:7.4.7:*:*:*:*:*:*:* |
|
| Vendors & Products |
Fortinet
Fortinet fortiportal |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: fortinet
Published:
Updated: 2026-06-09T15:36:59.170Z
Reserved: 2026-06-02T15:05:18.629Z
Link: CVE-2026-49938
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2026-06-09T16:16:43.323
Modified: 2026-06-11T21:32:28.907
Link: CVE-2026-49938
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-06-09T16:30:08Z