VYPR
← All advisories
High severity7.8NVD Advisory· Published Jun 13, 2023· Updated Jun 17, 2026

CVE-2023-26210

CVE-2023-26210

Description

Multiple improper neutralization of special elements used in an os command ('OS Command Injection') vulnerabilties [CWE-78] vulnerability in Fortinet allows a local authenticated attacker to execute arbitrary shell code as root user via crafted CLI requests.

Affected products

18
  • Fortinet/Fortiadc 200d6 versions
    cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*range: >=5.2.0,<=5.2.8
    • cpe:2.3:a:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc:7.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc:7.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*
    • cpe:2.3:h:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*range: 7.2.0
  • Fortinet/Fortiadc Manager10 versions
    cpe:2.3:a:fortinet:fortiadc_manager:5.2.0:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:fortinet:fortiadc_manager:5.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc_manager:5.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc_manager:5.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc_manager:5.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc_manager:6.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc_manager:6.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc_manager:6.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc_manager:6.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc_manager:7.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc_manager:7.1.0:*:*:*:*:*:*:*
  • Fortinet/Fortimanagercpe-rescue
    cpe:2.3:h:fortinet:fortiadcmanager:7.1.0:*:*:*:*:*:*:*
    Range: 7.1.0
  • Fortinet/Fortinetllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.