CVE-2021-43076: Fortinet FortiADC

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

An improper privilege management vulnerability [CWE-269] in FortiADC versions 6.2.1 and below, 6.1.5 and below, 6.0.4 and below, 5.4.5 and below and 5.3.7 and below may allow a remote authenticated attacker with restricted user profile to modify the system files using the shell access.

Affected products

• Fortinet FortiADC: from 5.3.0, up to and including 5.3.7; from 5.4.0, up to and including 5.4.5; from 6.0.0, up to and including 6.0.4; from 6.1.0, up to and including 6.1.5; version 6.2.0 only; version 6.2.1 only

Published 2022-09-06. Last modified 2026-06-17.