CVE-2023-26210

published 2023-06-13

CVE-2023-26210: Multiple improper neutralization of special elements used in an os command ('OS Command Injection') vulnerabilties [CWE-78] vulnerability in Fortinet allows a…

Priority P3 45 high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

Multiple improper neutralization of special elements used in an os command ('OS Command Injection') vulnerabilties [CWE-78] vulnerability in Fortinet allows a local authenticated attacker to execute arbitrary shell code as `root` user via crafted CLI requests.

Affected

33 ranges · showing 25

Vendor	Product	Version range	Fixed in
fortinet	fortiadc	—	—
fortinet	fortiadc	—	—
fortinet	fortiadc	—	—
fortinet	fortiadc	—	—
fortinet	fortiadc	—	—
fortinet	fortiadc	5.2.0 – 5.2.8	—
fortinet	fortiadc	5.3.0 – 5.3.7	—
fortinet	fortiadc	5.4.0 – 5.4.5	—
fortinet	fortiadc	6.0.0 – 6.0.4	—
fortinet	fortiadc	6.1.0 – 6.1.6	—
fortinet	fortiadc	6.2.0 – 6.2.6	—
fortinet	fortiadc	7.0.0 – 7.0.5	—
fortinet	fortiadc	7.1.0 – 7.1.1	—
fortinet	fortiadc_manager	—	—
fortinet	fortiadc_manager	—	—
fortinet	fortiadc_manager	—	—
fortinet	fortiadc_manager	—	—
fortinet	fortiadc_manager	—	—
fortinet	fortiadc_manager	—	—
fortinet	fortiadc_manager	—	—
fortinet	fortiadc_manager	—	—
fortinet	fortiadc_manager	—	—
fortinet	fortiadc_manager	—	—
fortinet	fortiadcmanager	—	—
fortinet	fortiadcmanager	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-78