CVE-2021-43065: Fortinet Fortinac

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below, version 8.8.9 and below allows attacker to gain higher privileges via the access to sensitive system data.

Affected products

• Fortinet Fortinac: from 8.8.0, before 8.8.10 (fixed in 8.8.10); from 9.1.0, before 9.1.4 (fixed in 9.1.4); version 9.2.0 only

Published 2021-12-09. Last modified 2026-06-17.