Description
A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiOS 6.2.9 through 6.2.17 allows attacker to execute unauthorized code or commands via specially crafted packets.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiOS | 7.6.0 – ≤ 7.6.3, 7.4.0 – ≤ 7.4.8, 7.2.0 – ≤ 7.2.11, 7.0.0 – ≤ 7.0.17, 6.4.0 – ≤ 6.4.16, 6.2.9 – ≤ 6.2.17 | — |
Advisories 3
- ICSA-26-071-02 Siemens RUGGEDCOM APE1808 Devices CISA ICS & IT advisories · May 14, 2026
- SSA-975644 SSA-975644: Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices Siemens ProductCERT · May 12, 2026
- WID-SEC-2026-1095 Fortinet FortiOS: Schwachstelle ermöglicht Manipulation von Dateien BSI CERT-Bund (WID) · Apr 14, 2026