Product:
FortiAuthenticator
Summary
A missing authorization vulnerability in Fortinet FortiAuthenticator versions 6.6.0 through 6.6.6, as well as all versions of 6.5, 6.4, and 6.3, may allow a read-only user to modify local users through a file upload to an unprotected endpoint. This vulnerability poses significant risks to user data and system integrity.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.2 | CVE-2026-21743 |
Exploitation
To exploit this vulnerability, an attacker with read-only access can upload files to an unprotected endpoint, which may allow them to make unauthorized modifications to local user accounts. This can lead to unauthorized access and potential data breaches, as the attacker can manipulate user settings and permissions.
Affected Products
- FortiAuthenticator 6.6.0 to 6.6.6: Vulnerable to unauthorized modifications via file uploads.
- FortiAuthenticator 6.5: All versions are affected by this vulnerability.
- FortiAuthenticator 6.4: All versions are susceptible to exploitation.
- FortiAuthenticator 6.3: All versions may be compromised due to this issue.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security patches provided by Fortinet for FortiAuthenticator. Additionally, securing endpoints and implementing strict access controls can help prevent unauthorized file uploads and modifications.