> Improper certificate validation in RADIUS protocol
[DATE: 10/11/2026 08:00]
[LANGUAGE: EN]
CVSSv3 Score:
7.5
An Improper Certificate Validation vulnerability [CWE-295] in FortiSASE Sovereign, FortiManager, Fortianalyzer, FortiManager Cloud and FortiAnalyzer Cloud RADIUS protocol may allow a MITM attacker to impersonate the radius server via a rogue RADIUS server.
Revised on 2026-11-10 00:00:00