CVE-2021-26108

7.5 highEPSS 1.1%

High (7.5) in fortinet fortios. EPSS 1.1% chance of exploitation in the next 30 days.

A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to retrieve the key by reverse engineering.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-798
Published: 2021-12-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortios

References

https://fortiguard.com/advisory/FG-IR-21-051
https://fortiguard.com/advisory/FG-IR-21-051

Check your stack JSON