CVE-2026-23573: Execute unauthorized code or commands in Fortinet FortiOS
CVE-2026-23573 is a cross-site scripting (XSS) vulnerability in Fortinet FortiOS and related products that may allow an authenticated remote user to execute unauthorized code or commands via crafted requests. The vulnerability affects multiple versions of FortiOS, FortiPAM, and FortiProxy. An official fix is available to address this issue. The CVSS score is 6.1, indicating a medium severity level.
AI Analysis
Technical Summary
This vulnerability involves improper neutralization of input during web page generation (CWE-79) in Fortinet FortiOS versions 7.6.0 through 7.6.6, all versions of 7.4 and 7.2, FortiPAM versions 1.0 through 1.8.0, and FortiProxy versions 7.4.0 through 7.4.3 and 7.2.0 through 7.2.9. It allows an authenticated remote attacker to execute unauthorized code or commands by sending crafted requests exploiting cross-site scripting flaws. The vulnerability has a CVSS v3.1 base score of 6.1 (medium severity) with network attack vector, low attack complexity, no privileges required, user interaction required, and partial impact on confidentiality and integrity. An official patch is available from Fortinet.
Potential Impact
An authenticated remote user can exploit this vulnerability to execute unauthorized code or commands on affected Fortinet products, potentially leading to partial confidentiality and integrity compromise. There is no indication of impact on availability. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
An official fix is available from Fortinet for this vulnerability. Users should apply the vendor-provided patches promptly to remediate the issue. Since the vulnerability requires authentication and user interaction, ensuring timely patching will effectively mitigate the risk.
CVE-2026-23573: Execute unauthorized code or commands in Fortinet FortiOS
Description
CVE-2026-23573 is a cross-site scripting (XSS) vulnerability in Fortinet FortiOS and related products that may allow an authenticated remote user to execute unauthorized code or commands via crafted requests. The vulnerability affects multiple versions of FortiOS, FortiPAM, and FortiProxy. An official fix is available to address this issue. The CVSS score is 6.1, indicating a medium severity level.
CVSS v3.1
Score 6.1medium
Affected software
cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves improper neutralization of input during web page generation (CWE-79) in Fortinet FortiOS versions 7.6.0 through 7.6.6, all versions of 7.4 and 7.2, FortiPAM versions 1.0 through 1.8.0, and FortiProxy versions 7.4.0 through 7.4.3 and 7.2.0 through 7.2.9. It allows an authenticated remote attacker to execute unauthorized code or commands by sending crafted requests exploiting cross-site scripting flaws. The vulnerability has a CVSS v3.1 base score of 6.1 (medium severity) with network attack vector, low attack complexity, no privileges required, user interaction required, and partial impact on confidentiality and integrity. An official patch is available from Fortinet.
Potential Impact
An authenticated remote user can exploit this vulnerability to execute unauthorized code or commands on affected Fortinet products, potentially leading to partial confidentiality and integrity compromise. There is no indication of impact on availability. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
An official fix is available from Fortinet for this vulnerability. Users should apply the vendor-provided patches promptly to remediate the issue. Since the vulnerability requires authentication and user interaction, ensuring timely patching will effectively mitigate the risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- fortinet
- Date Reserved
- 2026-01-14T14:46:20.539Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- official-fix
Threat ID: 6a565a3b68715ace43c7b61d
Added to database: 07/14/2026, 15:48:11 UTC
Last enriched: 07/14/2026, 16:21:14 UTC
Last updated: 07/14/2026, 16:54:55 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.