CVE-2016-8494

—

CVSS 3.0

7.2 high

EPSS

1%p72

Published

Feb 9, 2017 (Feb 9, 2017)

Modified

Jun 17, 2026

Description

Insufficient verification of uploaded files allows attackers with webui administrators privileges to perform arbitrary code execution by uploading a new webui theme.

Vendors: fortinet
Products: connect
Weakness: CWE-264
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.