Authentication bypass
CVSSv3 Score: 9.0 A Use of Hard-coded Password [CWE-259] vulnerability in FortiAuthenticator may allow an unauthenticated attacker to bypass credential validation in certain circumstances outside of the attacker's control and gain unauthorized access. Revised on 2026-11-10 00:00:00
Read at Fortinet PSIRT Advisories
- Vendor
- Fortinet
- Product
- FortiNAC / FortiAuthenticator
- CVSS v3.0
- 9.0
- Exposure class
- Identity
Why it ranks 59 (High)
- CVSS v3.0 9.0 critical
- Exposed product class: identity
- Widely deployed vendor product (Fortinet)
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Fortinet PSIRT Advisories (fortiguard.fortinet.com)