Known vulnerabilities in FortiNAC-F

Vendor: Fortinet, Inc
Software: FortiNAC-F
Software CPE: cpe:2.3:a:fortinet:fortinac-f:*:*:*:*:*:*:*:*
Website: https://www.fortinet.com/
Total vulnerabilities: 15
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiNAC-F FortiNAC-F is affected by 15 known vulnerabilities: 1 critical, 2 high, 6 medium, 6 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125993 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-21741		 CWE-601 Low
No
No
 7.6.6 14.04.2026 SB20260414116
#VU122076 - Stack-based buffer overflow
CVE-2025-15467		 CWE-121 High
Available
No
 7.4.3, 7.6.6 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 66 more
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387		 CWE-362 High
Available
No
 7.2.7, 7.4.1 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU91785 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-31488		 CWE-79 Low
No
No
 7.2.4 11.06.2024 SB20240611285
#VU88902 - Improper Certificate Validation
CVE-2023-48785		 CWE-295 Medium
No
No
 7.2.5 23.04.2024 SB2024042307
#VU86283 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-26206		 CWE-79 Medium
No
No
 7.2.3 09.02.2024 SB2024020908
#VU84867 - Improper Authentication
CVE-2022-45860		 CWE-287 Medium
No
No
 7.2.1 29.12.2023 SB2023050357
#VU84866 - Use of Hard-coded Credentials
CVE-2023-26203		 CWE-798 Low
No
No
 7.2.1 29.12.2023 SB2023050356
#VU84865 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-22637		 CWE-79 Low
No
No
 7.2.1 29.12.2023 SB2023050355
#VU77671 - Command injection
CVE-2023-33300		 CWE-77 Medium
No
No
 7.2.2 23.06.2023 SB2023062334
#VU77670 - Deserialization of Untrusted Data
CVE-2023-33299		 CWE-502 Critical
No
No
 7.2.2 23.06.2023 SB2023062334
#VU77198 - Resource Management Errors
CVE-2023-22633		 CWE-399 Medium
No
No
 7.2.1 13.06.2023 SB2023061328
#VU75739 - Insufficiently Protected Credentials
CVE-2022-45859		 CWE-522 Low
No
No
 7.2.1 04.05.2023 SB2023050454
#VU75738 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-45858		 CWE-327 Medium
No
No
 7.2.1 04.05.2023 SB2023050454
#VU75737 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-43950		 CWE-601 Low
No
No
 7.2.1 04.05.2023 SB2023050445