Unrated severityNVD Advisory· Published Feb 10, 2026· Updated Feb 12, 2026
CVE-2026-21743
CVE-2026-21743
Description
A missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, FortiAuthenticator 6.3 all versions may allow a read-only user to make modification to local users via a file upload to an unprotected endpoint.
Affected products
2- Fortinet/FortiAuthenticatorv5cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*Range: 6.6.0
- Range: <=6.6.6
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.