CVE-2023-26210

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Jun 13, 2023
Updated: Nov 7, 2023
CWE ID 78

Summary

CVE-2023-26210 is a critical OS Command Injection vulnerability affecting Fortinet FortiADCManager versions 7.1.0 and earlier, as well as FortiADC versions 7.2.0 and earlier. An authenticated attacker can exploit this vulnerability (CWE-78) by sending crafted CLI requests, enabling them to execute arbitrary shell code with root privileges. This weakness allows attackers to gain full control over the affected system.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Fortinet Fortiadc

Affected Vendors

  • Fortinet

Advisories, Assessments, and Mitigations