CVE-2021-43068: Fortinet Fortiauthenticator

High severity, CVSS 8.1. EPSS: 0.6% chance of exploitation in the next 30 days.

A improper authentication in Fortinet FortiAuthenticator version 6.4.0 allows user to bypass the second factor of authentication via a RADIUS login portal.

Affected products

• Fortinet Fortiauthenticator: version 6.4.0 only

Published 2021-12-09. Last modified 2026-06-17.