CVE-2021-26088

PoC for CVE-2021-26088 written in PowerShell Description An improper authentication vulnerability in FSSO Collector may allow an unauthenticated user to bypass any firewall authentication rule and access the protected network via sending specifically crafted UDP login notification packets...

CVE-2025-62439

An Improper Verification of Source of a Communication Channel vulnerability CWE-940 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions may allow an authenticated user with knowledge of FSSO policy configurations t...

Firewall policy bypass in FSSO Terminal Services Agent

An Improper Verification of Source of a Communication Channel vulnerability CWE-940 in FortiOS FSSO Terminal Services Agent may allow an authenticated user with knowledge of FSSO policy configurations to gain unauthorized access to protected network resources via crafted requests...

LDAP authentication bypass in Agentless VPN and FSSO

An Authentication Bypass by Primary Weakness vulnerability CWE-305 in FortiOS fnbamd may allow an unauthenticated attacker to bypass LDAP authentication of Agentless VPN or FSSO policy, under specific LDAP server configuration...

CVE-2025-62439: Improper Verification of Source of a Communication Channel

An Improper Verification of Source of a Communication Channel vulnerability CWE-940 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions may allow an authenticated user with knowledge of FSSO policy configurations t...

CVE-2026-22153: Authentication Bypass by Primary Weakness

An Authentication Bypass by Primary Weakness vulnerability CWE-305 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unauthenticated attacker to bypass LDAP authentication of Agentless VPN or FSSO policy, when the remote LDAP server is configured in a specific way...

EUVD-2021-12909

Malware in sbrugna...

CVE-2021-26088

An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets...

CVE-2021-26088

An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets...

Authentication flaw

An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets...

CVE-2021-26088

An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets...

CVE-2021-26088

An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets...

CVE-2021-26088

CVE-2021-26088 affects Fortinet FSSO Collector (versions 5.0.295 and earlier). The vulnerability is improper authentication that can let an unauthenticated user bypass a FSSO firewall policy and access the protected network by sending specially crafted UDP login notification packets. Impact descr...

CVE-2021-26088: Improper Authentication

An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets...

Insecure communication between DC agent and Collector

An improper authentication vulnerability CWE-287 in FSSO Collector may allow an unauthenticated user to bypass any firewall authentication rule and access the protected network via sending specifically crafted UDP login notification packets...

PT-2021-7635

Name of the Vulnerable Software and Affected Versions Fortinet Single Sign-On FSSO Collector versions 5.0.295 and below Description The issue is related to an improper authentication mechanism in the FSSO Collector, which can be exploited by a remote attacker to gain access to the protected...

Fortinet Single Sign On Hello Message Multiple Vulnerabilities - ver 2 (CVE-2015-2281)

Multiple Vulnerabilities exists in Fortinet Single Sign On FSSO. The vulnerabilities are due to a lack of adequate validation of user supplied input when processing HELLO messages. A remote, unauthenticated attacker could exploit these vulnerabilities by sending a specially crafted HELLO message ...

Stack overflow

Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On FSSO before build 164 allows remote attackers to execute arbitrary code via a large PROCESSHELLO message to the Message Dispatcher on TCP port 8000...

CVE-2015-2281

Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On FSSO before build 164 allows remote attackers to execute arbitrary code via a large PROCESSHELLO message to the Message Dispatcher on TCP port 8000...

PT-2015-5694

Name of the Vulnerable Software and Affected Versions Fortinet Single Sign On FSSO versions prior to build 164 Description The issue is related to a stack-based buffer overflow in the collectoragent.exe component. This can be exploited by remote attackers who send a large PROCESS HELLO message to...