Description
A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all versions may allow a remote unauthenticated attacker to retrieve sensitive information via a specially crafted request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiAuthenticator | 6.6.0 – ≤ 6.6.2, 6.5.0 – ≤ 6.5.7, 6.4.0 – ≤ 6.4.11, 6.3.0 – ≤ 6.3.5 | — |
Advisories 1
- NCSC-2026-0244 Kwetsbaarheid verholpen in Fortinet FortiAuthenticator NCSC-NL (Netherlands) · Jul 17, 2026