CVE-2023-26203

Published: May 3, 2023Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions may allow an authenticated attacker to access to the database via shell commands.

Affected (3)

Products: Fortinet: Fortinac, Fortinac F

2 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortinac	From 8.7.0 to 9.2.7
Fortinet Fortinac	From 9.4.0 to 9.4.3
Fortinet Fortinac F	Version 7.2.0

Related CWEs

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (2)

https://fortiguard.com/psirt/FG-IR-22-520

Source: psirt@fortinet.com

Vendor Advisory

https://fortiguard.com/psirt/FG-IR-22-520

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.