pwned.coffeeOrder ticket · today's special · 10 Nov 2026
House blend · ?unknownOn hold · status unknown
Improper neutralization of special elements used in an os command in GUI
CVSSv3 Score: 7.2 An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [cwe-78] in FortiManager, FortiAnalyzer, FortiManager Cloud, FortiAnalyzer Cloud, FortiSASE-Sovereign GUI may allow an authenticated attacker to execute unauthorized code or commands via specially crafted HTTP…
Do this now
No source names a fix yet: limit who can reach it until one does.
- First seen
- Last update
- Source
- news
Timeline
Reported by fortiguard.fortinet.com: Improper neutralization of special elements in output used by a downstream component in sshd
First reported.
Receipt
- Exploitation
- No known exploitation
- Score
- No CVSS published yet: severity unknown.
- Last checked
Sources: KEV – CVE record – Vendor –
Sources
- filestore.fortinet.com: Improper neutralization of special elements used in an os command
- filestore.fortinet.com: Improper neutralization of special elements used in an os command in GUI
- filestore.fortinet.com: Improper neutralization of special elements in output used by a downstream component in sshd
Totalone coffee