CVE-2021-41020: Fortinet Fortiisolator

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

An improper access control vulnerability [CWE-284] in FortiIsolator versions 2.3.2 and below may allow an authenticated, non privileged attacker to regenerate the CA certificate via the regeneration URL.

Affected products

• Fortinet Fortiisolator: from 2.3.0, before 2.3.3 (fixed in 2.3.3)

Published 2022-05-04. Last modified 2026-06-17.