Exploit público

Improper neutralization of special elements used in an OS command

CVSSv3 Score: 7.2 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiMail, FortiRecorder may allow an authenticated privileged attacker to execute unauthorized code or commands via a specifically crafted archive account configuration. Revised on 2026-11-10 00:00:00

Este es el aviso número 96 de Fortinet PSIRT en pwned.cl.

CategoríaFortinet PSIRT

Fuente: Fortinet PSIRT