What is the CVSS score of CVE-2026-22153?

CVE-2026-22153 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of LDAP are affected by CVE-2026-22153?

An unauthenticated attacker can bypass LDAP authentication on Fortios versions up to 7.6.4, potentially gaining unauthorized access to Agentless VPN or FortiSwitch deployments without valid…

How to fix or mitigate CVE-2026-22153?

Within 24 hours: Identify all Fortios deployments running versions 7.6.4 or earlier and document affected systems; disable Agentless VPN and FS LDAP authentication if not operationally critical, or restrict VPN access to specific IP ranges only. Within 7 days: Implement enhanced monitoring and logging on all affected Fortios devices to detect suspicious authentication attempts; contact Fortinet for patch timeline and interim mitigation guidance. Within 30 days: Deploy patched Fortios versions as they become available, or migrate to alternative authentication mechanisms (e.g., certificate-based, RADIUS) if patch delays extend beyond 30 days.

LDAP CVE-2026-22153

HIGH

Authentication Bypass by Primary Weakness (CWE-305)

2026-02-10 psirt@fortinet.com

Fortinet Fortigate LDAP Authentication Bypass Fortios

8.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.1 HIGH

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:02 vuln.today

CVE Published

Feb 10, 2026 - 16:16 nvd

HIGH 8.1

DescriptionCVE.org

An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unauthenticated attacker to bypass LDAP authentication of Agentless VPN or FSSO policy, when the remote LDAP server is configured in a specific way.

AnalysisAI

Fortios versions up to 7.6.4 contains a vulnerability that allows attackers to an unauthenticated attacker to bypass LDAP authentication of Agentless VPN or FS (CVSS 8.1).

Technical ContextAI

affects Fortios. An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unauthenticated attacker to bypass LDAP authentication of Agentless VPN or FSSO policy, when the remote LDAP server is configured in a specific way.