VYPR
← All advisories
High severity7.8NVD Advisory· Published Apr 6, 2022· Updated Jun 17, 2026

CVE-2021-26104

CVE-2021-26104

Description

Multiple OS command injection (CWE-78) vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, FortiAnalyzer 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, and FortiPortal 5.2.5 and below, 5.3.5 and below and 6.0.4 and below may allow a local authenticated and unprivileged user to execute arbitrary shell commands as root via specifically crafted CLI command parameters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Fortinet/Fortianalyzer2 versions
    cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*range: >=5.6.0,<6.0.11
    • (no CPE)range: <=6.2.7, <=6.4.5, all 6.2.x, all 6.0.x, all 5.6.x
  • Fortinet/Fortimanager2 versions
    cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*range: >=5.6.0,<6.0.11
    • (no CPE)range: <=6.2.7, <=6.4.5, all 6.2.x, all 6.0.x, all 5.6.x
  • Fortinet/Fortiportal2 versions
    cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*range: <5.2.6
    • (no CPE)range: <=5.2.5, <=5.3.5, <=6.0.4
  • Fortinet/Fortinet FortiManager, FortiAnalyzer, FortiPortalv5
    Range: FortiManager 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, FortiAnalyzer 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, and FortiPortal 5.2.5 and below, 5.3.5 and below and 6.0.4 and below

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.