securitytabs

CVE-2024-47575

Critical9.8CISA KEV — exploited in the wild

A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.12, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests.

CVSS
9.8v3.1
EPSS (exploit probability)
94.8%100th pct
CISA KEV
Listed

EPSS trendFIRST daily scores, last 90 days

FIRST EPSS fell from 95.1% on 2026-09-18 to 94.8% on 2026-10-20, ranging 94.8%–95.1% across 31 daily scores.
2026-09-18 → 2026-10-20 · 31 days · 94.8%–95.1%
Daily values
FIRST EPSS daily scores for this CVE
Score dateEPSSPercentile
2026-10-2094.8%99.9%
2026-10-1994.8%99.9%
2026-10-1894.8%99.9%
2026-10-1694.8%99.9%
2026-10-1594.8%99.9%
2026-10-1494.8%99.9%
2026-10-1394.8%99.9%
2026-10-1294.8%99.9%
2026-10-1194.8%99.9%
2026-10-1094.8%99.9%
2026-10-0994.8%99.9%
2026-10-0894.8%99.9%
2026-10-0794.8%99.9%
2026-10-0694.8%99.9%
2026-10-0594.8%99.9%
2026-10-0494.8%99.9%
2026-10-0394.8%99.9%
2026-10-0294.8%99.9%
2026-10-0194.8%99.9%
2026-09-3094.8%99.9%
2026-09-2994.8%99.9%
2026-09-2794.8%99.9%
2026-09-2694.8%99.9%
2026-09-2594.8%99.9%
2026-09-2494.8%99.9%
2026-09-2395.1%99.9%
2026-09-2295.1%99.9%
2026-09-2195.1%99.9%
2026-09-2095.1%99.9%
2026-09-1995.1%99.9%
2026-09-1895.1%99.9%

CISA KEV entrycatalogue 2026.10.20

Date added
2024-10-23
Federal due date
2024-11-13
Known ransomware use
Unknown

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Verbatim from the CISA KEV catalogue (CISA KEV, fetched 2026-10-21 07:34 UTC). The due date applies to US federal agencies under BOD 22-01.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

  • fortinet fortimanager
  • fortinet fortimanager cloud

Coverage1 article

References

Facts sourced from NVD, FIRST EPSS, and CISA KEV. Last synced 2026-10-21 07:34 UTC.

  • CVSS & description: NVD 2.0, fetched 2026-10-21 04:36 UTC
  • EPSS: FIRST EPSS, fetched 2026-10-21 07:34 UTC; score date 2026-10-20
  • KEV: CISA KEV, fetched 2026-10-21 07:34 UTC