Improper neutralization of special elements in output used by a downstream component in sshd
CVSSv3 Score: 7.4 A Path Traversal vulnerability [cwe-24] in FortiOS, FortiSASE, FortiProxy and FortiPam ssh daemon may allow an unauthenticated attacker to bypass authentication via specially crafted credentials. Revised on 2026-11-10 00:00:00
Read at Fortinet PSIRT Advisories
- Vendor
- Fortinet, OpenSSH
- Product
- FortiOS / FortiGate, FortiProxy, FortiPortal / FortiVoice / FortiRecorder
- CVSS v3.0
- 7.4
- Exposure class
- Edge / VPN / firewall, Remote access
Why it ranks 51 (High)
- CVSS v3.0 7.4 high
- Exposed product class: edge / VPN / firewall, remote access
- Widely deployed vendor product (Fortinet)
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Fortinet PSIRT Advisories (fortiguard.fortinet.com)