CVE-2021-24009: Fortinet Fortiwan

High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Multiple improper neutralization of special elements used in an OS command vulnerabilities (CWE-78) in the Web GUI of FortiWAN before 4.5.9 may allow an authenticated attacker to execute arbitrary commands on the underlying system's shell via specifically crafted HTTP requests.

Affected products

• Fortinet Fortiwan: up to and including 4.5.8

Published 2022-04-06. Last modified 2026-06-17.