CVE-2021-26093: Fortinet Fortiwlc

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An access of uninitialized pointer (CWE-824) vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a local and authenticated attacker to crash the access point being managed by the controller by executing a crafted CLI command.

Affected products

• Fortinet Fortiwlc: from 8.0.6, before 8.6.3 (fixed in 8.6.3)

Published 2024-12-19. Last modified 2026-06-17.