CVE-2026-23708: fortinet fortisoar Improper Authentication
Vulnerability summary
CVE-2026-23708 is a high (CVSS 8.1) Improper Authentication vulnerability in fortinet fortisoar. EPSS estimates a 0.28% chance of exploitation in the next 30 days, higher than 19.5% of scored vulnerabilities.
Timeline
- 14-04-2026PublishedVulnerability first disclosed.
- 15-04-2026Last modifiedVulnerability information updated.
Description
A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5.0 through 7.5.2 may allow an unauthenticated attacker to bypass authentication via replaying captured 2FA request. The attack requires being able to intercept and decrypt authentication traffic and precise timing to replay the request before token expiration, which raises the attack complexity.
CVSS metrics
2 scores · 2 sources · 1 version- CVE.orgCNA6.7MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:CDiffers
EPSS trend
Probability
0.28%
Chance of exploitation in the next 30 days
Percentile
20%
Versus all other CVEs
30-day change
0.00 pp
From 0.28% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
- CWE-862Missing AuthorizationThe product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Affected systems
Fortinet3 products
- fortisoar≥ 7.5.0, < 7.5.3 | ≥ 7.6.0, < 7.6.4
- fortisoar on-premise≥ 7.6.0, ≤ 7.6.3 | ≥ 7.5.0, ≤ 7.5.2
- fortisoar paas≥ 7.6.0, ≤ 7.6.3 | ≥ 7.5.0, ≤ 7.5.2
1 vendor · 3 products
References
1 links- fortiguard.fortinet.com/psirt/FG-IR-26-101Vendor Advisory