CVE-2021-26114

9.8 criticalEPSS 1.6%

Critical (9.8) in fortinet fortiwan. EPSS 1.6% chance of exploitation in the next 30 days.

Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2022-04-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortiwan

References

https://fortiguard.com/psirt/FG-IR-21-062
https://fortiguard.com/psirt/FG-IR-21-062

Check your stack JSON