← Database

CVE-2026-44277

CRITICAL CVSS: 9.8 Published: 2026-05-12 Modified: 2026-06-17

Description

A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticator 6.6.0 through 6.6.8, FortiAuthenticator 6.5.0 through 6.5.6 may allow attacker to execute unauthorized code or commands via crafted requests.

Affected Platforms

Fortinet Fortiauthenticator

Weakness Type

CWE-284

References