CVE-2021-26114

Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests...

CVE-2021-26114

CVE-2021-26114 is a FortiWAN SQL injection vulnerability affecting Fortinet FortiWAN prior to 4.5.9. An unauthenticated attacker can exploit improperly neutralized SQL commands via specifically crafted HTTP requests to execute unauthorized code or commands on the appliance. The issue is documente...

CVE-2021-26114

Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests...