165 matches found
CVE-2024-48887-FortiSwitch-Exploit
CVE-2024-48887-FortiSwitch-Exploit šØ FortiSwitch CVE-2024-48887 PoC JavaScript šØ š„ Just dropped a lightweight JavaScript snippet showcasing how unauthorized password changes can be triggered on vulnerable Fortinet FortiSwitch GUI endpoints. š ļø About the Vulnerability: An attacker can craft a simpl...
CVE-2024-48887-Exploit
CVE-2024-48887-Unverified Password Change CWE-620 Overview An unverified password change vulnerability in Fortinet FortiSwitch GUI that allows a remote unauthenticated attacker to change admin passwords via a specially crafted request Exploit: Download here Details CVE ID : CVE-2024-48887 Publish...
The vulnerability of the Command Line Interface (CLI) of the FortiPAM identity management system, the FortiOS operating system, the FortiProxy proxy server for protecting against internet attacks, and the FortiSwitch Manager local platform for managing software products allows a perpetrator to execute arbitrary code.
The vulnerability of the Command Line Interface CLI of the FortiPAM identity management system, the FortiOS operating system, the FortiProxy proxy server for protecting against internet attacks, and the FortiSwitch Manager local software platform is related to an incorrect restriction on the path...
The vulnerability affects the SSL-VPN component of the FortiPAM account management system, the FortiOS operating system, the local software management platform FortiSwitch Manager, and the FortiProxy proxy server for Internet attack protection. This allows a perpetrator to execute arbitrary code.
The vulnerability of the SSL-VPN component of the FortiPAM account management system, the FortiOS operating system, the local software development platform FortiSwitch Manager, and the FortiProxy proxy server for internet attack protection is related to the lack of security measures for the websi...
SSL-VPN Reflected XSS
...
EUVD-2025-209452
An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions,...
The vulnerability of the microprogramming software for Fortinet FortiSwitchAXFixed, related to deficiencies in access control, allows a intruder to execute arbitrary system commands.
The vulnerability of Fortinet FortiSwitchAXFixed microprogramming software is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary system commands using a specially created SSH configuration file...
The vulnerability of the microprogramming software for Fortinet FortiSwitchAXFixed devices arises from copying buffers without checking the size of the input data. This allows an attacker to execute arbitrary code.
The vulnerability of Fortinet FortiSwitchAXFixed microprogrammed software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted LLDP packet...
EUVD-2026-10516
An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system commands via a specifically crafted SSH config file...
EUVD-2026-10515
An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system commands via a specifically crafted SSH config file...
CVE-2026-22627
A buffer copy without checking size of input 'classic buffer overflow' vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an unauthenticated attacker within the same adjacent network to execute unauthorized code or commands on the device via sending a crafted LLDP packet...
CVE-2026-22627
CVE-2026-22627 affects Fortinet FortiSwitch AX Fixed 1.0.0 through 1.0.1. The vulnerability is a buffer copy without input size checking in LLDP packet handling, enabling an unauthenticated attacker on the same adjacent network to run arbitrary code or commands on the device. Impact per the entry...
CVE-2026-22628
An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system commands via a specifically crafted SSH config file...
shell command limitation bypass by SSH local config overriding
...
Buffer Overflow in LLDP OUI field
...
CVE-2025-49201
CVE-2025-49201 concerns Fortinet FortiPAM (versions 1.0.0ā1.5.0) and FortiSwitchManager (7.2.0ā7.2.4). Multiple sources confirm a weak authentication mechanism that enables an attacker to execute unauthorized code or commands by sending specially crafted HTTP requests, i.e., remote code execution...
Weak authentication in WAD/GUI
...
EUVD-2019-7963
Malware in sbrugna...