CVE-2021-36178: Fortinet Fortisdnconnector

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A insufficiently protected credentials in Fortinet FortiSDNConnector version 1.1.7 and below allows attacker to disclose third-party devices credential information via configuration page lookup.

Affected products

• Fortinet Fortisdnconnector: before 1.1.8 (fixed in 1.1.8)

Published 2021-10-06. Last modified 2026-06-17.