CVE-2021-42759

6.7 mediumEPSS 0.3%

Medium (6.7) in fortinet meru firmware. EPSS 0.3% chance of exploitation in the next 30 days.

A violation of secure design principles in Fortinet Meru AP version 8.6.1 and below, version 8.5.5 and below allows attacker to execute unauthorized code or commands via crafted cli commands.

Severity

CVSS 3.1

6.7 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 19% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2021-12-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:meru_firmware

References

https://fortiguard.com/advisory/FG-IR-21-004
https://fortiguard.com/advisory/FG-IR-21-004

Check your stack JSON