{"id":11239,"date":"2026-01-28T18:20:48","date_gmt":"2026-01-29T00:20:48","guid":{"rendered":"https:\/\/beaconlab.us\/?post_type=publicacion&#038;p=11239"},"modified":"2026-01-30T09:54:31","modified_gmt":"2026-01-30T15:54:31","slug":"alerta-2026-10-vulnerabilidad-critica-fortinet","status":"publish","type":"publicacion","link":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-10-vulnerabilidad-critica-fortinet\/","title":{"rendered":"Alerta 2026-10 Vulnerabilidad Critica Fortinet"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Producto(s) afectado(s):<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>FortiManager&nbsp;7.6.0&nbsp;&#8211;&nbsp;7.6.5, 7.2.0&nbsp;&#8211;&nbsp;7.2.11, 7.4.0&nbsp;&#8211;&nbsp;7.4.9, 7.6.0&nbsp;&#8211;&nbsp;7.6.5&nbsp;<\/li>\n\n\n\n<li>FortiOS&nbsp;7.0.0&nbsp;&#8211;&nbsp;7.0.18, 7.2.0&nbsp;&#8211;&nbsp;7.2.12, 7.4.0&nbsp;&#8211;&nbsp;7.4.10, 7.6.0&nbsp;&#8211;&nbsp;7.6.5&nbsp;<\/li>\n\n\n\n<li>FortiAnalyzer&nbsp;7.0.0&nbsp;&#8211;&nbsp;7.0.15, 7.2.0&nbsp;&#8211;&nbsp;7.2.11, 7.4.0&nbsp;&#8211;&nbsp;7.4.9, 7.6.0&nbsp;&#8211;&nbsp;7.6.5&nbsp;<\/li>\n\n\n\n<li>FortiProxy&nbsp;7.0, 7.2,&nbsp;7.4.0&nbsp;&#8211;&nbsp;7.4.12, 7.6.0&nbsp;&#8211;&nbsp;7.6.4&nbsp;<\/li>\n\n\n\n<li>FortiWeb&nbsp;7.4.0&nbsp;&#8211;&nbsp;7.4.11, 7.6.0&nbsp;&#8211;&nbsp;7.6.6, 8.0.0&nbsp;&#8211;&nbsp;8.0.3&nbsp;<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Descripci\u00f3n<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n mediante una ruta o canal alternativo [CWE-288] en\u00a0FortiOS,\u00a0FortiManager,\u00a0FortiAnalyzer,\u00a0FortiProxy\u00a0y\u00a0FortiWeb\u00a0podr\u00eda permitir que un atacante con una cuenta de\u00a0FortiCloud\u00a0y un dispositivo registrado inicie sesi\u00f3n en otros dispositivos registrados en otras cuentas, si la autenticaci\u00f3n SSO de\u00a0FortiCloud\u00a0est\u00e1 habilitada en dichos dispositivos.\u00a0Se etiqueto como CVE-2026-24858 con CVSSv3 9.4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">La funci\u00f3n de inicio de sesi\u00f3n SSO de&nbsp;FortiCloud&nbsp;no est\u00e1 habilitada en la configuraci\u00f3n predeterminada de f\u00e1brica. Sin embargo, cuando un administrador registra el dispositivo en&nbsp;FortiCare&nbsp;desde la interfaz gr\u00e1fica de usuario (GUI) del dispositivo, a menos que desactive la opci\u00f3n \u00abPermitir inicio de sesi\u00f3n administrativo mediante SSO de&nbsp;FortiCloud\u00bb en la p\u00e1gina de registro, el inicio de sesi\u00f3n SSO de&nbsp;FortiCloud&nbsp;se habilita al registrarse.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ya se han reportado casos de explotaci\u00f3n de esta vulnerabilidad, lo que lo hace m\u00e1s urgente.&nbsp;FortiManager&nbsp;Cloud,&nbsp;FortiAnalyzer&nbsp;Cloud y&nbsp;FortiGate&nbsp;Cloud no se ven afectados.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Soluci\u00f3n<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Los clientes deben actualizar a las \u00faltimas versiones del software para que funcione la autenticaci\u00f3n SSO de&nbsp;FortiCloud<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Informaci\u00f3n adicional:<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/thehackernews.com\/2026\/01\/fortinet-patches-cve-2026-24858-after.html\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/thehackernews.com\/2026\/01\/fortinet-patches-cve-2026-24858-after.html<\/a>&nbsp;<\/li>\n\n\n\n<li><a href=\"https:\/\/www.cisa.gov\/news-events\/alerts\/2026\/01\/28\/fortinet-releases-guidance-address-ongoing-exploitation-authentication-bypass-vulnerability-cve-2026\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.cisa.gov\/news-events\/alerts\/2026\/01\/28\/fortinet-releases-guidance-address-ongoing-exploitation-authentication-bypass-vulnerability-cve-2026<\/a>&nbsp;<\/li>\n\n\n\n<li><a href=\"https:\/\/cyberpress.org\/fortinet-actively-exploited-forticloud-sso-vulnerability-cve-2026-24858\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/cyberpress.org\/fortinet-actively-exploited-forticloud-sso-vulnerability-cve-2026-24858\/<\/a>&nbsp;<\/li>\n\n\n\n<li>https:\/\/arcticwolf.com\/resources\/blog\/cve-2026-24858\/&nbsp;<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"featured_media":0,"template":"","class_list":["post-11239","publicacion","type-publicacion","status-publish","hentry"],"acf":{"activar_pdf_link":false,"pdf":null,"numero_de_boletin":"","traffic_light_protocol":"Amber"},"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"Producto(s) afectado(s): FortiManager 7.6.0 - 7.6.5, 7.2.0 - 7.2.11, 7.4.0 - 7.4.9, 7.6.0 - 7.6.5 FortiOS 7.0.0 - 7.0.18, 7.2.0 - 7.2.12, 7.4.0 - 7.4.10, 7.6.0 - 7.6.5 FortiAnalyzer 7.0.0 - 7.0.15, 7.2.0 - 7.2.11, 7.4.0 - 7.4.9, 7.6.0 - 7.6.5 FortiProxy 7.0, 7.2, 7.4.0 - 7.4.12, 7.6.0 - 7.6.4 FortiWeb 7.4.0 - 7.4.11, 7.6.0 - 7.6.6, 8.0.0 - 8.0.3 Descripci\u00f3n Una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n mediante una ruta o canal alternativo [CWE-288] en FortiOS, FortiManager, FortiAnalyzer, FortiProxy y FortiWeb podr\u00eda permitir que un atacante con una cuenta de FortiCloud y un dispositivo registrado inicie sesi\u00f3n en otros dispositivos registrados en otras cuentas,\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-10-vulnerabilidad-critica-fortinet\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"es_ES\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Beacon Lab - CSIRT by Cybolt\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Alerta 2026-10 Vulnerabilidad Critica Fortinet - Beacon Lab\" \/>\n\t\t<meta property=\"og:description\" content=\"Producto(s) afectado(s): FortiManager 7.6.0 - 7.6.5, 7.2.0 - 7.2.11, 7.4.0 - 7.4.9, 7.6.0 - 7.6.5 FortiOS 7.0.0 - 7.0.18, 7.2.0 - 7.2.12, 7.4.0 - 7.4.10, 7.6.0 - 7.6.5 FortiAnalyzer 7.0.0 - 7.0.15, 7.2.0 - 7.2.11, 7.4.0 - 7.4.9, 7.6.0 - 7.6.5 FortiProxy 7.0, 7.2, 7.4.0 - 7.4.12, 7.6.0 - 7.6.4 FortiWeb 7.4.0 - 7.4.11, 7.6.0 - 7.6.6, 8.0.0 - 8.0.3 Descripci\u00f3n Una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n mediante una ruta o canal alternativo [CWE-288] en FortiOS, FortiManager, FortiAnalyzer, FortiProxy y FortiWeb podr\u00eda permitir que un atacante con una cuenta de FortiCloud y un dispositivo registrado inicie sesi\u00f3n en otros dispositivos registrados en otras cuentas,\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-10-vulnerabilidad-critica-fortinet\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-01-29T00:20:48+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-01-30T15:54:31+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@BeaconLabMX\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Alerta 2026-10 Vulnerabilidad Critica Fortinet - Beacon Lab\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Producto(s) afectado(s): FortiManager 7.6.0 - 7.6.5, 7.2.0 - 7.2.11, 7.4.0 - 7.4.9, 7.6.0 - 7.6.5 FortiOS 7.0.0 - 7.0.18, 7.2.0 - 7.2.12, 7.4.0 - 7.4.10, 7.6.0 - 7.6.5 FortiAnalyzer 7.0.0 - 7.0.15, 7.2.0 - 7.2.11, 7.4.0 - 7.4.9, 7.6.0 - 7.6.5 FortiProxy 7.0, 7.2, 7.4.0 - 7.4.12, 7.6.0 - 7.6.4 FortiWeb 7.4.0 - 7.4.11, 7.6.0 - 7.6.6, 8.0.0 - 8.0.3 Descripci\u00f3n Una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n mediante una ruta o canal alternativo [CWE-288] en FortiOS, FortiManager, FortiAnalyzer, FortiProxy y FortiWeb podr\u00eda permitir que un atacante con una cuenta de FortiCloud y un dispositivo registrado inicie sesi\u00f3n en otros dispositivos registrados en otras cuentas,\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-10-vulnerabilidad-critica-fortinet\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-10-vulnerabilidad-critica-fortinet\\\/#listItem\",\"name\":\"Alerta 2026-10 Vulnerabilidad Critica Fortinet\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-10-vulnerabilidad-critica-fortinet\\\/#listItem\",\"position\":2,\"name\":\"Alerta 2026-10 Vulnerabilidad Critica Fortinet\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#listItem\",\"name\":\"Home\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#organization\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/\",\"telephone\":\"+528007374357\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.mx\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/BeaconLab_V2-03.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-10-vulnerabilidad-critica-fortinet\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-10-vulnerabilidad-critica-fortinet\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/twitter.com\\\/BeaconLabMX\",\"https:\\\/\\\/www.linkedin.com\\\/showcase\\\/beaconlabmx\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-10-vulnerabilidad-critica-fortinet\\\/#webpage\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-10-vulnerabilidad-critica-fortinet\\\/\",\"name\":\"Alerta 2026-10 Vulnerabilidad Critica Fortinet - Beacon Lab\",\"description\":\"Producto(s) afectado(s): FortiManager 7.6.0 - 7.6.5, 7.2.0 - 7.2.11, 7.4.0 - 7.4.9, 7.6.0 - 7.6.5 FortiOS 7.0.0 - 7.0.18, 7.2.0 - 7.2.12, 7.4.0 - 7.4.10, 7.6.0 - 7.6.5 FortiAnalyzer 7.0.0 - 7.0.15, 7.2.0 - 7.2.11, 7.4.0 - 7.4.9, 7.6.0 - 7.6.5 FortiProxy 7.0, 7.2, 7.4.0 - 7.4.12, 7.6.0 - 7.6.4 FortiWeb 7.4.0 - 7.4.11, 7.6.0 - 7.6.6, 8.0.0 - 8.0.3 Descripci\\u00f3n Una vulnerabilidad de omisi\\u00f3n de autenticaci\\u00f3n mediante una ruta o canal alternativo [CWE-288] en FortiOS, FortiManager, FortiAnalyzer, FortiProxy y FortiWeb podr\\u00eda permitir que un atacante con una cuenta de FortiCloud y un dispositivo registrado inicie sesi\\u00f3n en otros dispositivos registrados en otras cuentas,\",\"inLanguage\":\"es-ES\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-10-vulnerabilidad-critica-fortinet\\\/#breadcrumblist\"},\"datePublished\":\"2026-01-28T18:20:48-06:00\",\"dateModified\":\"2026-01-30T09:54:31-06:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#website\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"inLanguage\":\"es-ES\",\"publisher\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Alerta 2026-10 Vulnerabilidad Critica Fortinet - Beacon Lab","description":"Producto(s) afectado(s): FortiManager 7.6.0 - 7.6.5, 7.2.0 - 7.2.11, 7.4.0 - 7.4.9, 7.6.0 - 7.6.5 FortiOS 7.0.0 - 7.0.18, 7.2.0 - 7.2.12, 7.4.0 - 7.4.10, 7.6.0 - 7.6.5 FortiAnalyzer 7.0.0 - 7.0.15, 7.2.0 - 7.2.11, 7.4.0 - 7.4.9, 7.6.0 - 7.6.5 FortiProxy 7.0, 7.2, 7.4.0 - 7.4.12, 7.6.0 - 7.6.4 FortiWeb 7.4.0 - 7.4.11, 7.6.0 - 7.6.6, 8.0.0 - 8.0.3 Descripci\u00f3n Una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n mediante una ruta o canal alternativo [CWE-288] en FortiOS, FortiManager, FortiAnalyzer, FortiProxy y FortiWeb podr\u00eda permitir que un atacante con una cuenta de FortiCloud y un dispositivo registrado inicie sesi\u00f3n en otros dispositivos registrados en otras cuentas,","canonical_url":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-10-vulnerabilidad-critica-fortinet\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-10-vulnerabilidad-critica-fortinet\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/es\/#listItem","position":1,"name":"Home","item":"https:\/\/beaconlab.us\/es\/","nextItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-10-vulnerabilidad-critica-fortinet\/#listItem","name":"Alerta 2026-10 Vulnerabilidad Critica Fortinet"}},{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-10-vulnerabilidad-critica-fortinet\/#listItem","position":2,"name":"Alerta 2026-10 Vulnerabilidad Critica Fortinet","previousItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/es\/#listItem","name":"Home"}}]},{"@type":"Organization","@id":"https:\/\/beaconlab.us\/es\/#organization","name":"Beacon Lab","description":"CSIRT by Cybolt","url":"https:\/\/beaconlab.us\/es\/","telephone":"+528007374357","logo":{"@type":"ImageObject","url":"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-10-vulnerabilidad-critica-fortinet\/#organizationLogo"},"image":{"@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-10-vulnerabilidad-critica-fortinet\/#organizationLogo"},"sameAs":["https:\/\/twitter.com\/BeaconLabMX","https:\/\/www.linkedin.com\/showcase\/beaconlabmx"]},{"@type":"WebPage","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-10-vulnerabilidad-critica-fortinet\/#webpage","url":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-10-vulnerabilidad-critica-fortinet\/","name":"Alerta 2026-10 Vulnerabilidad Critica Fortinet - Beacon Lab","description":"Producto(s) afectado(s): FortiManager 7.6.0 - 7.6.5, 7.2.0 - 7.2.11, 7.4.0 - 7.4.9, 7.6.0 - 7.6.5 FortiOS 7.0.0 - 7.0.18, 7.2.0 - 7.2.12, 7.4.0 - 7.4.10, 7.6.0 - 7.6.5 FortiAnalyzer 7.0.0 - 7.0.15, 7.2.0 - 7.2.11, 7.4.0 - 7.4.9, 7.6.0 - 7.6.5 FortiProxy 7.0, 7.2, 7.4.0 - 7.4.12, 7.6.0 - 7.6.4 FortiWeb 7.4.0 - 7.4.11, 7.6.0 - 7.6.6, 8.0.0 - 8.0.3 Descripci\u00f3n Una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n mediante una ruta o canal alternativo [CWE-288] en FortiOS, FortiManager, FortiAnalyzer, FortiProxy y FortiWeb podr\u00eda permitir que un atacante con una cuenta de FortiCloud y un dispositivo registrado inicie sesi\u00f3n en otros dispositivos registrados en otras cuentas,","inLanguage":"es-ES","isPartOf":{"@id":"https:\/\/beaconlab.us\/es\/#website"},"breadcrumb":{"@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-10-vulnerabilidad-critica-fortinet\/#breadcrumblist"},"datePublished":"2026-01-28T18:20:48-06:00","dateModified":"2026-01-30T09:54:31-06:00"},{"@type":"WebSite","@id":"https:\/\/beaconlab.us\/es\/#website","url":"https:\/\/beaconlab.us\/es\/","name":"Beacon Lab","description":"CSIRT by Cybolt","inLanguage":"es-ES","publisher":{"@id":"https:\/\/beaconlab.us\/es\/#organization"}}]},"og:locale":"es_ES","og:site_name":"Beacon Lab - CSIRT by Cybolt","og:type":"article","og:title":"Alerta 2026-10 Vulnerabilidad Critica Fortinet - Beacon Lab","og:description":"Producto(s) afectado(s): FortiManager 7.6.0 - 7.6.5, 7.2.0 - 7.2.11, 7.4.0 - 7.4.9, 7.6.0 - 7.6.5 FortiOS 7.0.0 - 7.0.18, 7.2.0 - 7.2.12, 7.4.0 - 7.4.10, 7.6.0 - 7.6.5 FortiAnalyzer 7.0.0 - 7.0.15, 7.2.0 - 7.2.11, 7.4.0 - 7.4.9, 7.6.0 - 7.6.5 FortiProxy 7.0, 7.2, 7.4.0 - 7.4.12, 7.6.0 - 7.6.4 FortiWeb 7.4.0 - 7.4.11, 7.6.0 - 7.6.6, 8.0.0 - 8.0.3 Descripci\u00f3n Una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n mediante una ruta o canal alternativo [CWE-288] en FortiOS, FortiManager, FortiAnalyzer, FortiProxy y FortiWeb podr\u00eda permitir que un atacante con una cuenta de FortiCloud y un dispositivo registrado inicie sesi\u00f3n en otros dispositivos registrados en otras cuentas,","og:url":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-10-vulnerabilidad-critica-fortinet\/","og:image":"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png","og:image:secure_url":"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png","article:published_time":"2026-01-29T00:20:48+00:00","article:modified_time":"2026-01-30T15:54:31+00:00","twitter:card":"summary_large_image","twitter:site":"@BeaconLabMX","twitter:title":"Alerta 2026-10 Vulnerabilidad Critica Fortinet - Beacon Lab","twitter:description":"Producto(s) afectado(s): FortiManager 7.6.0 - 7.6.5, 7.2.0 - 7.2.11, 7.4.0 - 7.4.9, 7.6.0 - 7.6.5 FortiOS 7.0.0 - 7.0.18, 7.2.0 - 7.2.12, 7.4.0 - 7.4.10, 7.6.0 - 7.6.5 FortiAnalyzer 7.0.0 - 7.0.15, 7.2.0 - 7.2.11, 7.4.0 - 7.4.9, 7.6.0 - 7.6.5 FortiProxy 7.0, 7.2, 7.4.0 - 7.4.12, 7.6.0 - 7.6.4 FortiWeb 7.4.0 - 7.4.11, 7.6.0 - 7.6.6, 8.0.0 - 8.0.3 Descripci\u00f3n Una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n mediante una ruta o canal alternativo [CWE-288] en FortiOS, FortiManager, FortiAnalyzer, FortiProxy y FortiWeb podr\u00eda permitir que un atacante con una cuenta de FortiCloud y un dispositivo registrado inicie sesi\u00f3n en otros dispositivos registrados en otras cuentas,","twitter:image":"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png"},"aioseo_meta_data":{"post_id":"11239","title":null,"description":null,"keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"WebPage","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":{"faqs":[],"keyPoints":[],"titles":[],"descriptions":[],"socialPosts":{"email":[],"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2026-01-29 00:20:49","updated":"2026-01-30 16:04:02","seo_analyzer_scan_date":null,"focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/beaconlab.us\/es\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tAlerta 2026-10 Vulnerabilidad Critica Fortinet\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/beaconlab.us\/es\/"},{"label":"Alerta 2026-10 Vulnerabilidad Critica Fortinet","link":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-10-vulnerabilidad-critica-fortinet\/"}],"_links":{"self":[{"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/publicacion\/11239","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/publicacion"}],"about":[{"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/types\/publicacion"}],"version-history":[{"count":2,"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/publicacion\/11239\/revisions"}],"predecessor-version":[{"id":11244,"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/publicacion\/11239\/revisions\/11244"}],"wp:attachment":[{"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/media?parent=11239"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}