high7.8
CVE-2023-26210
Multiple improper neutralization of special elements used in an os command ('OS Command Injection') vulnerabilties [CWE-78] vulnerability in Fortinet allows a …
Impact
Multiple improper neutralization of special elements used in an os command ('OS Command Injection') vulnerabilties [CWE-78] vulnerability in Fortinet allows a local authenticated attacker to execute arbitrary shell code as `root` user via crafted CLI requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortiadc | from 5.2.0 through 5.2.8 from 5.3.0 through 5.3.7 from 5.4.0 through 5.4.5 from 6.0.0 through 6.0.4 from 6.1.0 through 6.1.6 from 6.2.0 through 6.2.6 |
| Fortinet | Fortiadc Manager | Versions 5.2.0, 5.2.1, 5.3.0, 5.4.0, 6.0.0, 6.1.0 |