Tracker / CVE-2023-26210
CVE-2023-26210
High 7.8
Multiple improper neutralization of special elements used in an os command ('OS Command Injection') vulnerabilties [CWE-78] vulnerability in Fortinet allows a local authenticated attacker to execute arbitrary shell code as `root` user via crafted CLI requests.
Affected products and versions
| fortinet | fortiadc |
|---|---|
| fortinet | fortiadc · 5.2.0 → 5.2.8 |
| fortinet | fortiadc · 5.3.0 → 5.3.7 |
| fortinet | fortiadc · 5.4.0 → 5.4.5 |
| fortinet | fortiadc · 6.0.0 → 6.0.4 |
| fortinet | fortiadc · 6.1.0 → 6.1.6 |
| fortinet | fortiadc · 6.2.0 → 6.2.6 |
| fortinet | fortiadc · 7.0.0 → 7.0.5 |
| fortinet | fortiadc_manager |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.