> Protected hostname bypass
[DATE: 10/03/2026 07:00]
[LANGUAGE: EN]
CVSSv3 Score:
5.0
An authentication bypass by spoofing [CWE-290] vulnerability in FortiWeb protected hostname feature may allow a remote unauthenticated attacker to bypass hostname restrictions via a specially crafted request.
Revised on 2026-03-10 00:00:00