> LDAP authentication bypass in Agentless VPN and FSSO
[DATE: 10/02/2026 08:00]
[LANGUAGE: EN]
CVSSv3 Score:
7.5
An Authentication Bypass by Primary Weakness vulnerability [CWE-305] in FortiOS fnbamd may allow an unauthenticated attacker to bypass LDAP authentication of Agentless VPN or FSSO policy, under specific LDAP server configuration.
Revised on 2026-02-10 00:00:00