> Missing authorization on CSV user import

[SOURCE] Fortinet FortiGuard [DATE: 10/02/2026 08:00] [LANGUAGE: EN]

 
  CVSSv3 Score:
 
 6.8

 A missing authorization vulnerability [CWE-862] in FortiAuthenticator may allow a read-only user to make modification to local users via a file upload to an unprotected endpoint.

  Revised on 2026-02-10 00:00:00

[messages.read_original_source] →