CVE-2021-26115: Fortinet Fortiwan

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.An OS command injection (CWE-78) vulnerability in FortiWAN Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.

Affected products

• Fortinet Fortiwan: before 4.5.8 (fixed in 4.5.8)

Published 2024-12-19. Last modified 2026-06-17.