Description
A insufficiently protected credentials vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to obtain sensitive information via HTTPS requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiAuthenticator | 8.0.0 – ≤ 8.0.3, 6.6.0 – ≤ 6.6.10 | — |
Advisories 2
- NCSC-2026-0490 Kwetsbaarheden verholpen in Fortinet FortiAuthenticator NCSC-NL (Netherlands) · Nov 12, 2026
- WID-SEC-2026-4519 Fortinet Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026