Description
A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to perform an open redirect attack via crafted HTTP requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiAuthenticator | 8.0.0 – ≤ 8.0.3, 6.6.0 – ≤ 6.6.10, 6.5.0 – ≤ 6.5.7 | — |
Advisories 2
- NCSC-2026-0490 Kwetsbaarheden verholpen in Fortinet FortiAuthenticator NCSC-NL (Netherlands) · Nov 12, 2026
- WID-SEC-2026-4519 Fortinet Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026