CVE-2021-41024: Fortinet FortiOS
High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.
A relative path traversal [CWE-23] vulnerabiltiy in FortiOS versions 7.0.0 and 7.0.1 and FortiProxy verison 7.0.0 may allow an unauthenticated, unauthorized attacker to inject path traversal character sequences to disclose sensitive information of the server via the GET request of the login page.
Affected products
Published 2021-12-08. Last modified 2026-06-17.