CVE-2021-42759: Fortinet Meru Firmware

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

A violation of secure design principles in Fortinet Meru AP version 8.6.1 and below, version 8.5.5 and below allows attacker to execute unauthorized code or commands via crafted cli commands.

Affected products

• Fortinet Meru Firmware: from 8.5.0, up to and including 8.5.5; from 8.6.0, before 8.6.2 (fixed in 8.6.2)

Published 2021-12-09. Last modified 2026-06-17.