Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

13 records

Vendor: Fortinet Component: Fortinac-f Clear all filters
TI-2026-17508 CVE-2026-21741 · GHSA-9fmp-fvvg-6vr2

Open redirect in Fortinet FortiNAC-F

Priority LOW 21

An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in Fortinet FortiNAC-F 7.6.0 through 7.6.5, FortiNAC-F 7.4 all versions, FortiNAC-F 7.2 all versions may allow a remote privile…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00209 Published 2026-04-14 No fix listed CWE-601
TI-2026-20057 CVE-2026-24858 · GHSA-2x38-48vp-w23x

Authentication bypass in Fortinet FortiWeb

Priority CRITICAL 100KEV

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, Fort…

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.86592 Published 2026-01-27 No fix listed CWE-288
TI-2023-26615 CVE-2023-48785 · GHSA-94q2-3cfp-g294

Improper certificate validation in Fortinet FortiNAC-F

Priority LOW 21

An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the HTTPS communication channel be…

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00173 Published 2025-03-14 No fix listed CWE-295
TI-2023-08811 CVE-2023-22633 · GHSA-9gr9-452c-98q9

Access control flaw in Fortinet FortiNAC

Priority MEDIUM 40

An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions 8.7.0 all versions may allow an unauthe…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00654 Published 2023-06-13 No fix listed CWE-264
TI-2023-08814 CVE-2023-22637 · GHSA-fjx8-gmr3-vg45

Cross-site scripting in Fortinet FortiNAC

Priority MEDIUM 42

An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all ve…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.0061 Published 2023-05-03 No fix listed CWE-79
TI-2023-11384 CVE-2023-26203 · GHSA-4pj9-45vq-jvvh

Hard-coded credentials in Fortinet FortiNAC

Priority LOW 35

A use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions may allow an authenticated att…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00164 Published 2023-05-03 No fix listed CWE-798
TI-2022-22662 CVE-2022-45860 · GHSA-6r8m-7q26-8wcc

Weak authentication in Fortinet FortiNAC

Priority LOW 39

A weak authentication vulnerability [CWE-1390] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions in device registration page may allow a…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00488 Published 2023-05-03 No fix listed CWE-1390
TI-2022-21594 CVE-2022-43950 · GHSA-4jvr-8wq7-595q

Open redirect in Fortinet FortiNAC

Priority LOW 22

A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.1 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions may allo…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00422 Published 2023-05-03 No fix listed CWE-601
TI-2022-22661 CVE-2022-45859 · GHSA-9v39-cw8g-p5rj

Insufficiently protected credentials in Fortinet FortiNAC

Priority LOW 19

An insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions, 8.7.0 all versions may allow a local attacker with syst…

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00143 Published 2023-05-03 No fix listed CWE-522
TI-2022-21595 CVE-2022-43951 · GHSA-7824-x6vq-p8mj

Information disclosure in Fortinet FortiNAC

Priority MEDIUM 40

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.11 and below, 8.7.6 and below may allow an unauthenticated attacker…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00593 Published 2023-04-11 No fix listed CWE-200
TI-2022-19312 CVE-2022-40675 · GHSA-66q7-rr79-fw65

Cryptographic flaw in Fortinet FortiNAC

Priority LOW 39

Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00385 Published 2023-02-16 No fix listed CWE-310
TI-2022-18920 CVE-2022-39954 · GHSA-6g49-f785-8862

XML external entity injection in Fortinet FortiNAC

Priority MEDIUM 46

An improper restriction of xml external entity reference in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.7, FortiNAC version 9.1.0 through 9.1.8, FortiNAC version 8.8.0 through 8.8.11…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00548 Published 2023-02-16 No fix listed CWE-611
TI-2022-18002 CVE-2022-38375 · GHSA-pxw3-v724-g6xr

Improper authorization in Fortinet FortiNAC

Priority MEDIUM 50

An improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform some administrative operations over the FortiNAC instance via…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01079 Published 2023-02-16 No fix listed CWE-285