Description
A out-of-bounds write vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to execute unauthorized code or commands via http requests, should the attacker be able to defeat ASLR protections.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiAuthenticator | 8.0.0 – ≤ 8.0.3, 6.6.0 – ≤ 6.6.10 | — |
Advisories 2
- NCSC-2026-0490 Kwetsbaarheden verholpen in Fortinet FortiAuthenticator NCSC-NL (Netherlands) · Nov 12, 2026
- WID-SEC-2026-4519 Fortinet Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026