FO
Product
FortiAuthenticator
24
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 8Low 3
Watch
Add FortiAuthenticator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-26116 | 8.8 | Apr 6 | An improper neutralization of special elements used in an OS command vulnerability in the command line interpreter of FortiAuthenticator before 6.3.1 may allow an authenticated… Affected: 5.0.0 before 6.3.1 |
| CVE-2021-43068 | 8.1 | Dec 9 | A improper authentication in Fortinet FortiAuthenticator version 6.4.0 allows user to bypass the second factor of authentication via a RADIUS login portal Affected: 6.4.0 |
| CVE-2025-53379 | 7.5 | Jul 14 | A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all versions may allow a remote unauthenticated attacker to retrieve… Affected: 6.6.0 through 6.6.2; 6.5.0 through 6.5.7; 6.4.0 through 6.4.11; 6.3.0 through 6.3.5 |
| CVE-2021-22124 | 7.5 | Aug 4 | An uncontrolled resource consumption (denial of service) vulnerability in the login modules of FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4, and 3.0.0 through 3.0.6; and… Affected: 4.0.0 through 4.3.4; 5.0.0 through 5.5.0; 6.0.0 before 6.0.6 |
| CVE-2021-24005 | 7.5 | Jul 6 | Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator versions before 6.3.0 may allow an attacker with access to the files or… Affected: 6.0.0 before 6.3.0 |
| CVE-2026-21743 | 7.2 | Feb 10 | A missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions,… Affected: 6.6.0 through 6.6.6; 6.5.0 through 6.5.7; 6.4.0 through 6.4.11; 6.3.0 through 6.3.5 |
Showing 6