> Broken access control in the RADIUS type admin group
[DATE: 12/08/2026 07:00]
[LANGUAGE: EN]
CVSSv3 Score:
8.8
An Improper Authentication vulnerability [CWE-287] in the FortiWeb Remote Radius Type Admin Authentication configured with specific, non-default settings may allow a remote unauthenticated attacker to login into the Fortiweb GUI/CLI with a random username and password
Revised on 2026-08-12 00:00:00