Skip to main content
Threat Radar animated logo
DashboardThreatsMapFeedsAPILifetime Access
reconnecting
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…

CVE-2023-26205: Escalation of privilege in Fortinet FortiADC

0
High
VulnerabilityCVE-2023-26205cvecve-2023-26205
Published: Tue Nov 14 2023 (11/14/2023, 18:05:48 UTC)
Source: CVE Database V5
Vendor/Project: Fortinet
Product: FortiADC

Description

An improper access control vulnerability [CWE-284] in FortiADC automation feature 7.1.0 through 7.1.2, 7.0 all versions, 6.2 all versions, 6.1 all versions may allow an authenticated low-privileged attacker to escalate their privileges to super_admin via a specific crafted configuration of fabric automation CLI script.

Technical Details

Data Version
5.2
Assigner Short Name
fortinet
Date Reserved
2023-02-20T15:09:20.635Z
Cvss Version
3.1
State
PUBLISHED

Threat ID: 694194789050fe8508060cb4

Added to database: 12/16/2025, 5:18:48 PM

Last updated: 12/16/2025, 5:23:18 PM

Views: 1

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Related Threats

CVE-2023-5997: Use after free in Google Chrome

Unknown
VulnerabilityTue Dec 16 2025

CVE-2023-4804: CWE-489: Active Debug Code in Johnson Controls Quantum HD Unity Compressor

Critical
VulnerabilityTue Dec 16 2025

CVE-2023-4699: CWE-306 Missing Authentication for Critical Function in Mitsubishi Electric Corporation MELSEC-F Series FX3U-16MT/ES

Critical
VulnerabilityTue Dec 16 2025

CVE-2023-4474: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Zyxel NAS326 firmware

Critical
VulnerabilityTue Dec 16 2025

CVE-2023-4473: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Zyxel NAS326 firmware

Critical
VulnerabilityTue Dec 16 2025

Actions

Please log in to the Console to use AI analysis features.

Need enhanced features?

Contact root@offseq.com for Pro access with improved analysis and higher rate limits.

Latest Threats