← CVE Intelligence

CVE-2026-21743

Fortinet / FortiAuthenticator PUBLISHED

Description (CNA)

A missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, FortiAuthenticator 6.3 all versions may allow a read-only user to make modification to local users via a file upload to an unprotected endpoint.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiAuthenticatoraffected 6.6.0 through 6.6.6; affected 6.5.0 through 6.5.7; affected 6.4.0 through 6.4.11; affected 6.3.0 through 6.3.5

CWE

CWE-862

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.