gagaltotal/cve-2026-24858Python helper to scan Fortinet web management for CVE-2026-24858 SSO authentication bypass and optionally send explicit payloads with user authorization.
CVE-2026-24858 - Administrative FortiCloud SSO authentication bypass
This repository contains a conservative Python helper for scanning Fortinet web management indicators and an optional (explicit) payload sender. The exploit/payload sender is disabled by default and requires an explicit flag to run.
Usage examples:
python3 -m pip install -r requirements.txt
python3 cve_2026_24858_tool.py scan --target 192.168.2.3
python3 cve_2026_24858_tool.py scan --target 192.168.2.3 --versbose
python3 cve_2026_24858_tool.py exploit --target 192.168.2.3 --endpoint /vuln/path \
--payload-file ./payload.bin --enable-exploit
Warnings:
--payload-file to the
specified endpoint; the tool does not craft or invent exploit payloads.Additional options:
--verbose: print response headers and a body snippet (scan & exploit).--dump-body: print the full response body (may be large).--save-response <file>: save the full response body to the given file path.Example: save exploit response to a file while printing headers:
python3 cve_2026_24858_tool.py exploit --target 192.168.2.3 --endpoint /vuln/path \
--payload-file ./payload.bin --enable-exploit --verbose --save-response ./resp.html