Exploit público

Improper neutralization of special elements used in an OS command

CVSSv3 Score: 7.2 An improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability (CWE-78) in FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, FortiManager Cloud system-ha plugin may allow an authenticated attacker to execute unauthorized commands via a crafted HTTP request. Revised on 2026-11-10 00:00:00

Este es el aviso número 97 de Fortinet PSIRT en pwned.cl.

CategoríaFortinet PSIRT

Fuente: Fortinet PSIRT