{
    "id": "CVE-2024-47575",
    "published": "2024-10-23 15:15:30",
    "last_modified": "2026-06-17 07:57:20",
    "cvss_score": "9.8",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "cwe": "CWE-306",
    "description": "A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.12, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests.",
    "epss_score": "0.94766",
    "epss_percentile": "0.99857",
    "kev": 1,
    "kev_due": "2024-11-13",
    "has_exploit": 0,
    "updated_at": "2026-09-26 18:35:57",
    "priority": {
        "rank": 1,
        "label": "Patch first",
        "why": "On CISA KEV — known exploited in the wild, due 2024-11-13."
    },
    "products": [
        {
            "vendor": "fortinet",
            "product": "fortimanager"
        },
        {
            "vendor": "fortinet",
            "product": "fortimanager_cloud"
        }
    ],
    "kev_detail": {
        "cve_id": "CVE-2024-47575",
        "date_added": "2024-10-23",
        "due_date": "2024-11-13",
        "vendor": "Fortinet",
        "product": "FortiManager",
        "name": "Fortinet FortiManager Missing Authentication Vulnerability",
        "ransomware": 0
    },
    "exploits": [],
    "refs_list": [
        "https://fortiguard.fortinet.com/psirt/FG-IR-24-423",
        "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-47575"
    ]
}