CVE-2024-45326

4.3 mediumEPSS 0.3%

Medium (4.3) in fortinet fortideceptor. EPSS 0.3% chance of exploitation in the next 30 days.

An Improper Access Control vulnerability [CWE-284] vulnerability in Fortinet FortiDeceptor 6.0.0, FortiDeceptor 5.3 all versions, FortiDeceptor 5.2 all versions, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions may allow an authenticated attacker with none privileges to perform operations on the central management appliance via crafted requests.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2025-01-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortideceptor

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-285

Check your stack JSON