CVE-2023-41678

8.8 highEPSS 1.1%

High (8.8) in fortinet. EPSS 1.1% chance of exploitation in the next 30 days.

A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker to execute unauthorized code or commands via specifically crafted request.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-415
Published: 2023-12-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortios
fortinet:fortipam

References

https://fortiguard.com/psirt/FG-IR-23-196
https://fortiguard.com/psirt/FG-IR-23-196

Check your stack JSON