This vulnerability is an externally-controlled format string issue in Fortinet FortiOS versions 7.0.0 through 7.6.4. An authenticated administrator can leverage this flaw by submitting specially crafted configuration data to execute unauthorized code or commands on the affected device. The CVSS 3.1 vector indicates the attack requires local access with low complexity, high privileges, no user interaction, and impacts confidentiality, integrity, and availability. No patch or official remediation information is provided in the available data.

Successful exploitation allows an authenticated administrator to execute arbitrary code or commands, potentially leading to full compromise of the affected FortiOS device, impacting confidentiality, integrity, and availability of the system. This could result in unauthorized control over network security functions managed by FortiOS.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict administrative access to trusted personnel only and monitor for unusual configuration changes. Do not rely on generic mitigations as the vulnerability requires authenticated admin privileges.