CVE-2021-42758

8.8 highEPSS 2.0%

High (8.8) in fortinet fortiwlc. EPSS 2.0% chance of exploitation in the next 30 days.

An improper access control vulnerability [CWE-284] in FortiWLC 8.6.1 and below may allow an authenticated and remote attacker with low privileges to execute any command as an admin user with full access rights via bypassing the GUI restrictions.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2021-12-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortiwlc

References

https://fortiguard.com/advisory/FG-IR-21-200
https://fortiguard.com/advisory/FG-IR-21-200

Check your stack JSON