Unrated severityNVD Advisory· Published Jun 13, 2023· Updated Jan 14, 2026

CVE-2023-26210

Description

Multiple improper neutralization of special elements used in an os command ('OS Command Injection') vulnerabilties [CWE-78] vulnerability in Fortinet allows a local authenticated attacker to execute arbitrary shell code as root user via crafted CLI requests.

Affected products

Fortinet/Fortiadc 200dcpe-rescue
cpe:2.3:h:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*
Range: 7.2.0
Fortinet/Fortimanagercpe-rescue
cpe:2.3:h:fortinet:fortiadcmanager:7.1.0:*:*:*:*:*:*:*
Range: 7.1.0

Patches

Vulnerability mechanics

References

fortiguard.com/psirt/FG-IR-23-076mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000