Unauthenticated FortiMail command injection rated CVSS 9.8
Crafted HA join-request packets can run unauthorized commands; no CVE or versions are named.
Stories per day · 30 days
3 RSS
2 stories, newest first · one card per story
Stories tagged #cwe-77
Cron Job Injection in Remote Backup
Fortinet FortiSandbox command injection flaw (CVSS 6.7) in remote backup cron jobs lets privileged attackers execute arbitrary code via crafted HTTP requests.