CVE-2024-46662

8.8 highEPSS 2.3%

High (8.8) in fortinet. EPSS 2.3% chance of exploitation in the next 30 days.

A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager versions 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to escalation of privilege via specifically crafted packets

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2025-03-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortimanager
fortinet:fortimanager_cloud

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-222

Check your stack JSON