CVE-2021-26113: Fortinet Fortiwan

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A use of a one-way hash with a predictable salt vulnerability [CWE-760] in FortiWAN before 4.5.9 may allow an attacker who has previously come in possession of the password file to potentially guess passwords therein stored.

Affected products

• Fortinet Fortiwan: before 4.5.9 (fixed in 4.5.9)

Published 2022-04-06. Last modified 2026-06-17.