CVE-2026-22153
HIGHFortiOS 7.6.0-7.6.4 - Unauthenticated Authentication Bypass via LDAP Configuration
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2026-22153. PoCs published by XiaomingX, glitchhawks, washingtonmaister.
AI-analyzed exploit summary The repository claims to provide an exploit for an authentication bypass vulnerability in Fortinet FortiOS but lacks actual exploit code, instead directing users to an external download link. The README contains vague descriptions without technical details.
Description
An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unauthenticated attacker to bypass LDAP authentication of Agentless VPN or FSSO policy, when the remote LDAP server is configured in a specific way.
Exploits (3)
The repository claims to provide an exploit for an authentication bypass vulnerability in Fortinet FortiOS but lacks actual exploit code, instead directing users to an external download link. The README contains vague descriptions without technical details.
The repository provides a detailed description of CVE-2026-22153, an authentication bypass vulnerability in Fortinet FortiOS versions 7.6.0 through 7.6.4. It explains the vulnerability's impact and prerequisites but does not include actual exploit code.
The repository claims to be a PoC for CVE-2026-22153 affecting FortiOS versions 7.6.0 to 7.6.4, but only contains a README with no actual exploit code. The README includes links to external sources (tinyurl.com) which are suspicious and could be phishing or malware distribution vectors.
References (1)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H