CVE-2023-36634

8.8 highEPSS 0.6%

An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to list and delete arbitrary files and directory via specially crafted command arguments.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-73
Published: 2023-09-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortiap-u

References

https://fortiguard.com/psirt/FG-IR-23-123
https://fortiguard.com/psirt/FG-IR-23-123

Check your stack JSON