elevation
1 live · 1 on record · last incident 4 days ago
Live1
- live9.0FortiManager FortiManager FGFM elevation before registration password verification
Patch now · Disclosed · since 10 Nov 2026
An improper authorization flaw in FortiManager's FGFM interface allows an unauthenticated attacker that can reach the FGFM port to execute code via crafted packets before password verification. The issue carries a CVSS v3 score of 9.0, marking it as critical.
Earlier0
Nothing closed yet.