This vulnerability affects multiple FortiOS versions from 6.2.9 up to 7.6.3 and arises from missing authentication on critical functions. An attacker can send specially crafted packets to execute unauthorized code or commands on the affected FortiOS devices. The CVSS 3.1 vector indicates the attack requires adjacent network access, no privileges, and no user interaction, with high impact on integrity but no impact on confidentiality or availability. Fortinet has released an official fix to remediate this vulnerability.

Successful exploitation allows an attacker to execute unauthorized commands or code on FortiOS devices, potentially compromising device integrity. There is no direct impact on confidentiality or availability according to the CVSS vector. No known exploits are reported in the wild at this time.

An official fix is available from Fortinet and should be applied promptly to affected FortiOS versions. Since the vulnerability is not related to a cloud service, administrators must manually update their devices. No additional mitigation steps are indicated by the vendor advisory.