> Arbitrary file deletion in administrative interface
[DATE: 10/03/2026 07:00]
[LANGUAGE: EN]
CVSSv3 Score:
6.0
An Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability [CWE-88] in FortiDeceptor WEBUI may allow a privileged attacker with super-admin profile and CLI access to delete sensitive files via crafted HTTP requests.
Revised on 2026-03-10 00:00:00