CVE-2024-47571: Fortinet FortiManager

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper access to FortiGate via valid credentials.

Affected products

• Fortinet FortiManager: from 7.0.7, before 7.0.9 (fixed in 7.0.9); version 6.4.12 only; version 7.2.3 only; version 7.4.0 only

Published 2025-01-14. Last modified 2026-06-17.