CVE-2016-8494: Fortinet Connect

High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days.

Insufficient verification of uploaded files allows attackers with webui administrators privileges to perform arbitrary code execution by uploading a new webui theme.

Affected products

• Fortinet Connect: version 14.2 only; version 14.10 only; version 15.10 only; version 16.7 only

Published 2017-02-09. Last modified 2026-06-17.