Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
8 IOCs
FortiWeb Flaw Lets Unauthenticated Attackers Log In With Random Username and Password
Excerpt
Fortinet has released security updates for a critical FortiWeb authentication vulnerability that could allow a remote, unauthenticated attacker to log in to the web application firewall using a random username and password. Tracked as CVE-2026-26035, the flaw could expose graphical management and command-line administrative functions to unauthorized access. The vulnerability is classified as improper authentication, or CWE-287. Instead of requiring a stolen password, a valid…
Read the original report →Indicators of Compromise
Open the mindmap →8 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-70468 | High | Score 59/100 | First seen |
| CVE | CVE-2026-71408 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-70466 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-70465 | High | Score 59/100 | First seen |
| CVE | CVE-2026-26035 | High | Score 59/100 | First seen |
| CVE | CVE-2026-49975 | Medium | Score 56/100 | First seen |
| CVE | CVE-2026-70467 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-71407 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…