CVE-2023-26203

HIGH 7.8CVE-2023-26203 · Published 03/05/2023 · updated 17/06/2026

In short

CVE-2023-26203 is a HIGH (CVSS 7.8) vulnerability affecting fortinac (fortinet), fortinac-f (fortinet).
Chance of exploitation in the next 30 days (EPSS): 0.16%, higher than 5.6% of all vulnerabilities.
Fix: update to 9.4.3 or later.

Package	Affected versions	Patched versions
fortinac fortinet	`≥ 8.7.0, ≤ 9.2.7≥ 9.4.0, < 9.4.3`	`9.4.3`
fortinac-f fortinet	`= 7.2.0`	No fix yet

Description

A use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions may allow an authenticated attacker to access to the database via shell commands.

References

fortiguard.com/psirt/FG-IR-22-520 · Vendor Advisory

More vulnerabilities in fortinac

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

fortinac

fortinet

≥ 8.7.0, ≤ 9.2.7≥ 9.4.0, < 9.4.3

9.4.3

fortinac-f

fortinet

= 7.2.0

No fix yet

More vulnerabilities in fortinac

See all →