gcdRadar
tags/Other

hard-coded-password

1 live · 1 on record · last incident 4 days ago

Dec ’25records per month, by first reportNov ’26

Live1

  1. live9.0
    FortiAuthenticator FortiAuthenticator hard‑coded password enables authentication bypass

    Patch now · Disclosed · since 10 Nov 2026

    A hard‑coded password (CWE‑259) in FortiAuthenticator can be used by an unauthenticated attacker to bypass credential validation. The flaw has a CVSS v3 score of 9.0 and may lead to unauthorized access.

Earlier0

Nothing closed yet.