A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticator 6.6.0 through 6.6.8, FortiAuthenticator 6.5.0 through 6.5.6 may allow attacker to execute unauthorized code or commands via crafted requests.
References
| Link | Resource |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-26-128 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
28 May 2026, 10:16
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticator 6.6.0 through 6.6.8, FortiAuthenticator 6.5.0 through 6.5.6 may allow attacker to execute unauthorized code or commands via crafted requests. |
15 May 2026, 13:41
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:* | |
| First Time |
Fortinet fortiauthenticator
Fortinet |
|
| References | () https://fortiguard.fortinet.com/psirt/FG-IR-26-128 - Vendor Advisory |
12 May 2026, 18:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-12 18:17
Updated : 2026-05-28 10:16
NVD link : CVE-2026-44277
Mitre link : CVE-2026-44277
CVE.ORG link : CVE-2026-44277
JSON object : View
Products Affected
fortinet
- fortiauthenticator
CWE
CWE-284
Improper Access Control