CVE-2019-15710

7.2 highEPSS 1.9%

High (7.2) in fortiguard fortiextender firmware. EPSS 1.9% chance of exploitation in the next 30 days.

An OS command injection vulnerability in FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted "execute date" commands.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2019-10-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortiguard:fortiextender_firmware

References

https://fortiguard.com/psirt/FG-IR-19-273
https://fortiguard.com/psirt/FG-IR-19-273

Check your stack JSON