CVE-2021-26108: Fortinet FortiOS

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to retrieve the key by reverse engineering.

Affected products

• Fortinet FortiOS: from 5.6.0, up to and including 5.6.13; from 6.0.0, up to and including 6.0.12; from 6.2.0, up to and including 6.2.8; from 6.4.0, up to and including 6.4.5; version 7.0.0 only

Published 2021-12-08. Last modified 2026-06-17.