CVE-2026-22153Disclosure(fortinet / fortios)

⚠️ FortiOS Authentication Bypass Vulnerability Lets Attackers Bypass LDAP Authentication Source: https://cybersecuritynews.com/fortios-ldap-authentication-bypass-vulnerability/ Fortinet has disclosed a high-severity authentication bypass vulnerability in FortiOS, tracked as CVE-2026-22153 (FG-IR-25-1052), that could allow unauthenticated attackers to sidestep LDAP authentication for Agentless VPN or Fortinet Single Sign-On (FSSO) policies. The flaw resides in the fnbamd daemon and requires specific LDAP server configurations enabling unauthenticated binds. The issue stems from improper handling of LDAP authentication requests. An attacker could exploit this under certain setups, such as those permitting anonymous binds, to gain unauthorized access without valid credentials. #cybersecuritynews #vulnerability

أصدرت @Fortinet تنبيهات لمعالجة ثغرات في منتجاتها مع وجود ثغرتين عاليتي الخطورة تتطلبان تحديثاً عاجلاً، هما: - الثغرة CVE-2025-52436 بتقييم CVSS 7.9. - الثغرة CVE-2026-22153 بتقييم CVSS 7.5. https://t.co/5LqpQ4toOA

🔨マイクロソフト、攻撃で悪用されているゼロデイ6件などを修正（CVE-2026-21533、CVE-2026-21525ほか） 🩹Fortinet、深刻度の高いFortiSandboxとFortiOSの脆弱性にパッチ（CVE-2025-52436、CVE-2026-22153） 〜サイバーアラート　2月11~12日〜 https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/43837/

Fortinet FortiOS の認証バイパス脆弱性 CVE-2026-22153 が FIX：LDAP 認証回避が可能 https://iototsecnews.jp/2026/02/10/fortios-authentication-bypass-vulnerability-lets-attackers-bypass-ldap-authentication/ Fortinet の FortiOS において、認証を飛び越えて内部ネットワークへ侵入される恐れのある深刻な脆弱性が発見されました。この問題の原因は、外部の認証サーバ (LDAP) と連携してユーザー確認を行う fnbamd というプログラム処理に不備があることです。特定の条件において、攻撃者がパスワードを入力せずにログインを試みた際に、システムが正当なアクセスと誤認して通してしまう設計上のミスが存在しました。この脆弱性 CVE-2026-22153 (CVSS：7.5) は、特に匿名での接続を許可する LDAP サーバと連携している場合にリスクが高まります。これが悪用されると、VPN を通じた社内ネットワークへの侵入を許し、データ盗取などの攻撃の踏み台にされる危険性があります。ご利用のチームは、ご注意ください。 #CVE202622153 #Fortinet #FortiOS #Vulnerability

FortiOSのAgentless VPN／FSSOでLDAP認証を回避できる脆弱性(CVE-2026-22153) https://rocket-boys.co.jp/security-measures-lab/fortios-agentless-vpn-fsso-ldap-auth-bypass-vulnerability-cve-2026-22153/ #セキュリティ対策Lab #セキュリティ #Security #CybersecurityNews

『allow an unauthenticated attacker to bypass LDAP authentication of Agentless VPN or FSSO policy, under specific LDAP server configuration.』 CVE-2026-22153 FortiOS LDAP authentication bypass in Agentless VPN and FSSO https://www.fortiguard.com/psirt/FG-IR-25-1052

”FortinetのUTM機器などに搭載されている「FortiOS」の「SSL-VPN」コンポーネントに脆弱性「CVE-2026-22153」が判明した問題で” 【セキュリティ ニュース】「FortiOS」のLDAP認証バイパス脆弱性、仮想パッチが公開（1ページ目 / 全1ページ）：Security NEXT https://www.security-next.com/186841

FortiOS 7.6.x auth bypass (CVE-2026-22153) targets LDAP-backed Agentless VPN and FSSO policies. Before you patch to 7.6.5, verify your exposure: # Check if LDAP auth is configured show user ldap # Check FSSO status show user fsso diagnose debug application fssod -1 # Look for unauthorized VPN sessions RIGHT NOW diagnose vpn tunnel list get vpn ssl monitor # Review admin login history for anomalies diagnose sys admin list The attack doesn't need valid credentials — CWE-288 means the auth flow itself is bypassed via an alternate path. If your FortiGate uses LDAP for VPN or SSO, an unauthenticated attacker can access your network. Patch order: FortiOS 7.6.x first, then FortiSwitchManager (CVE-2025-25249 heap overflow covers 7.0 through 7.6), then FortiClientLinux local privesc. #CCIE #CiscoSecurity #Fortinet #FortiOS #NetworkSecurity

FortiOSのAgentless VPN／FSSOでLDAP認証を回避できる脆弱性(CVE-2026-22153) https://rocket-boys.co.jp/security-measures-lab/fortios-agentless-vpn-fsso-ldap-auth-bypass-vulnerability-cve-2026-22153/

@securityLab_jp CVE-2026-22153 in fortiOS is nasty - LDAP auth bypass in agentless VPN. classic access control miss. hope people aren't running default configs

FortiOS: Ranjivost zaobilaženja provjere identiteta (CVE-2026-22153) https://sajberinfo.com/2026/02/15/fortios-ranjivost-zaobilazenja/ #bezbjednost #cybernapad #cybersecurity #firewall #fortigate #fortios #fssopolitike #infosec #ldapserver #networksecurity #provjeraidentiteta #ranjivost #sigurnostmreze #vpnbezagenta

⚠️ Vulnerabilidades en productos Fortinet ❗ CVE-2026-22153 ❗ CVE-2025-52436 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-fortinet-7/ https://t.co/AGcsLdJu8O

La vulnerabilidad CVE-2026-22153 en FortiOS permite a atacantes sin autenticar bypassar la autenticación LDAP en políticas de Agentless VPN o FSSO, si el servidor LDAP permite binds anónimos. Afecta versiones 7.6.0 a 7.6.4, debido a un manejo incorrecto en el daemon fnbamd. Remedio: Actualiza a FortiOS 7.6.5 o superior vía la herramienta de upgrade de Fortinet. Workaround: Deshabilita binds no autenticados en el servidor LDAP. Para Active Directory (Server 2019+), usa este PowerShell: $configDN = (Get-ADRootDSE).configurationNamingContext $dirSvcDN = "CN=Directory Service,CN=Windows NT,CN=Services,$configDN" Set-ADObject -Identity $dirSvcDN -Add {'msDS-Other-Settings'='DenyUnauthenticatedBind=1'}

⚠️ Nouvelle vulnérabilité Fortinet (CVE-2026-22153) : contournement de l'authentification LDAP. Risque potentiel pour VPN et FSSO. #Cybersecurity #Vulnerability #InfoSec https://cyberveille.esante.gouv.fr/alertes/fortinet-cve-2026-22153-2026-02-11 https://cyberveille.esante.gouv.fr/alertes/fortinet-cve-2026-22153-2026-02-11

Fortinet's FortiOS faces a critical LDAP authentication bypass vulnerability (CVE-2026-22153). Immediate upgrade to version 7.6.5+ recommended. Link: https://thedailytechfeed.com/critical-fortios-vulnerability-cve-2026-22153-allows-attackers-to-bypass-ldap-authentication-urgent-update-needed/ #Security #Fortinet #Risk #Update #Patch #Threat #Breach #Exploit #Network #Software #Firewall #Protection #Alert #Compliance #Attack #System #Bug #Mitigation #Safety #Technology

🚨 Fortinet Patches High-Severity Bugs Enabling Unauth Command Execution + LDAP Auth Bypass Fortinet released fixes for multiple product flaws, including a FortiSandbox XSS (CVE-2025-52436) that can lead to unauthenticated command execution and a FortiOS LDAP authentication bypass (CVE-2026-22153) under certain Agentless VPN/FSSO configurations. Treat this as urgent perimeter hygiene for Fortinet-heavy estates because the affected components sit on high-trust boundary paths (sandboxing, VPN/SSO auth). 🎯 Target: Global/Enterprise (Fortinet FortiOS/FortiGate/FortiSandbox users) #️⃣ Category: #Vulnerability #BlueTeam 🔗 URL: https://www.securityweek.com/fortinet-patches-high-severity-vulnerabilities/

Fortinet FortiOS'ta LDAP Kimlik Doğrulama Atlama Açığı: CVE-2026-22153 ve FG-IR-25-1052 Analiz ve (2026 Güncel Tehdit) güncelleme bilgisi. https://www.teknokure.com/yazi/fortinet-fortios-ta-ldap-kimlik-dogrulama-atlama-acigi?utm_source=x&utm_medium=social&utm_campaign=organic #CyberSecurity #vulnerability #eipsteinfiles #SecurityAlert

🚨 FortiOS LDAP Auth Bypass Flaw Lets Attackers Slip Past Agentless VPN/FSSO (CVE-2026-22153) Fortinet disclosed CVE-2026-22153 (FG-IR-25-1052), a high-severity auth bypass in FortiOS 7.6.0–7.6.4 where certain LDAP configurations that allow unauthenticated binds can let attackers sidestep LDAP authentication for Agentless VPN or FSSO policies. Upgrade to FortiOS 7.6.5+ and disable anonymous/unauthenticated LDAP binds to prevent unauthorized network access via SSL-VPN policy controls. 🎯 Target: Global/Enterprise (FortiOS SSL-VPN, Agentless VPN, FSSO) #️⃣ Category: #Vulnerability #BlueTeam 🔗 URL: https://cybersecuritynews.com/fortios-ldap-authentication-bypass-vulnerability/

🟠 CVE-2026-22153 - High An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unauthenticated attacker to bypass LDAP authentication ... https://www.thehackerwire.com/vulnerability/CVE-2026-22153/ https://t.co/aphXqAl0L2