> Unauthenticated access to local configuration
[DATE: 13/01/2026 08:00]
[LANGUAGE: EN]
CVSSv3 Score:
9.3
An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiFone Web Portal page may allow an unauthenticated attacker to obtain the device configuration via crafted HTTP or HTTPS requests.
Revised on 2026-01-13 00:00:00