> arbitrary command execution in fgfmsd daemon

[SOURCE] Fortinet FortiGuard [DATE: 13/10/2026 07:00] [LANGUAGE: EN]

 
  CVSSv3 Score:
 
 5.3

 An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiManager fgfmd daemon may allow a remote attacker impersonating a fortimanager cluster node to execute unauthorized code or commands via specially crafted packets. Impersonation of a Fortimanager cluster node requires possessing the node's certificate and private key.

  Revised on 2026-10-13 00:00:00

[messages.read_original_source] →