CVE-2021-36181: Fortinet Fortiportal

Low severity, CVSS 3.1. EPSS: 0.5% chance of exploitation in the next 30 days.

A concurrent execution using shared resource with improper Synchronization vulnerability ('Race Condition') in the customer database interface of FortiPortal before 6.0.6 may allow an authenticated, low-privilege user to bring the underlying database data into an inconsistent state via specific coordination of web requests.

Affected products

• Fortinet Fortiportal: from 4.0.0, before 6.0.6 (fixed in 6.0.6)

Published 2021-11-02. Last modified 2026-06-17.