Exploit público

Exploit público Fortinet PSIRT

Incorrect authorization

2026-11-11

CVSSv3 Score: 9.1 An Incorrect Authorization vulnerability [CWE-863] in FortiMail may allow an unauthenticated remote attacker to obtain an authenticated IBE webmail session as any IBE recipient and r

Exploit público Fortinet PSIRT

Incorrect authorization

2026-11-11

CVSSv3 Score: 9.1 An Incorrect Authorization vulnerability [CWE-863] in FortiAuthenticator may allow an attacker to bypass authentication and gain unauthorized access. Revised on 2026-11-10 00:00:00

Exploit público Fortinet PSIRT

Incorrect authorization

2026-11-11

CVSSv3 Score: 8.7 An Incorrect Authorization vulnerability [CWE-863], an Improper Privilege Management vulnerability [CWE-269] and an Authentication Bypass by Spoofing vulnerability [CWE-290] in Forti

Exploit público Fortinet PSIRT

Improper privilege management

2026-11-11

CVSSv3 Score: 7.2 An improper privilege management vulnerability [CWE-269] in FortiAnalyzer, FortiAnalyzer Cloud, FortiManager and FortiManager Cloud may allow an authenticated privileged attacker to

Exploit público Fortinet PSIRT

Improper privilege management

2026-11-11

CVSSv3 Score: 7.2 An Improper Privilege Management vulnerability[CWE-269] in FortiAuthenticator may allow an authenticated attacker to escalate privileges. Revised on 2026-11-10 00:00:00

Exploit público Fortinet PSIRT

Improper neutralization of special elements used in an os command in GUI

2026-11-11

CVSSv3 Score: 7.2 An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [cwe-78] in FortiManager, FortiAnalyzer, FortiManager Cloud, FortiAnalyzer

Exploit público Fortinet PSIRT

Inyección de comandos en FortiMail permite ejecución remota de código

2026-11-11

Una vulnerabilidad crítica de inyección de comandos en FortiMail permite que atacantes no autenticados ejecuten código arbitrario mediante paquetes HA join-request.

Exploit público Fortinet PSIRT

Improper neutralization of special elements used in an os command

2026-11-11

CVSSv3 Score: 7.2 An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiMail may allow an authenticated administrator to execute

Exploit público Fortinet PSIRT

Improper neutralization of special elements used in an os command

2026-11-11

CVSSv3 Score: 7.2 An OS Command Injection vulnerability [CWE-78] in FortiManager, FortiManager Cloud, FortiAnalyzer and FortiAnalyzer Cloud may allow an authenticated administrator to execute unauthor

Exploit público Fortinet PSIRT

Improper neutralization of special elements used in an ldap query

2026-11-11

CVSSv3 Score: 8.2 An Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')[CWE-90] in FortiAuthenticator may allow an authenticated attacker to bypass authentication. Su

Exploit público Fortinet PSIRT

Improper neutralization of special elements used in an SQL command in collectoragent

2026-11-11

CVSSv3 Score: 8.3 An improper neutralization of special elements used in an sql command ('sql injection')[CWE-89] vulnerability may allow an authenticated attacker to execute unauthorized code or comm

Exploit público Fortinet PSIRT

Improper neutralization of special elements used in an SQL command

2026-11-11

CVSSv3 Score: 9.4 An Improper neutralization of special elements used in an SQL command ('SQL injection') [CWE-89] in FortiMail may allow an unauthenticated attacker to execute unauthorized code or co

Exploit público Fortinet PSIRT

Improper neutralization of special elements used in an SQL command

2026-11-11

CVSSv3 Score: 8.8 An improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiAnalyzer, FortiAnalyzer Cloud, FortiManager and FortiManager Cl

Exploit público Fortinet PSIRT

Improper neutralization of special elements used in an SQL command

2026-11-11

CVSSv3 Score: 8.8 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')[CWE-89] in FortiAuthenticator may allow an authenticated attacker to execute unauthorized SQL

Exploit público Fortinet PSIRT

Improper neutralization of special elements used in an SQL command

2026-11-11

CVSSv3 Score: 7.1 An SQL Injection vulnerability [CWE-89] in FortiManager, FortiManager Cloud, FortiAnalyzer, FortiAnalyzer Cloud may allow an authenticated attacker to execute unauthorized SQL comman

Exploit público Fortinet PSIRT

Improper neutralization of special elements used in an OS command in webmail

2026-11-11

CVSSv3 Score: 8.8 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiMail, FortiRecorder and FortiVoice may allow an authentic

Exploit público Fortinet PSIRT

Inyección de comandos en FortiAnalyzer y FortiManager

2026-11-11

Fortinet reporta una vulnerabilidad de inyección de comandos (OS Command Injection) que permite a atacantes privilegiados ejecutar código no autorizado.

Exploit público Fortinet PSIRT

Inyección de comandos en FortiMail permite ejecución de código como root

2026-11-11

Una vulnerabilidad de inyección de comandos OS en FortiMail permite a administradores autenticados ejecutar código arbitrario como root.

Exploit público Fortinet PSIRT

Improper neutralization of special elements used in an OS command

2026-11-11

CVSSv3 Score: 7.2 An improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability (CWE-78) in FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, FortiManager

Exploit público Fortinet PSIRT

Improper neutralization of special elements used in an OS command

2026-11-11

CVSSv3 Score: 7.2 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiMail, FortiRecorder may allow an authenticated privileged