CVE-2022-45858: Fortinet Fortinac

High severity, CVSS 7.4. EPSS: 0.2% chance of exploitation in the next 30 days.

A use of a weak cryptographic algorithm vulnerability [CWE-327] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.0 all versions, 8.8.0 all versions, 8.7.0 all versions may increase the chances of an attacker to have access to sensitive information or to perform man-in-the-middle attacks.

Affected products

• Fortinet Fortinac: from 8.7.0, before 9.1.0 (fixed in 9.1.0); from 9.2.0, before 9.2.6 (fixed in 9.2.6); from 9.4.0, before 9.4.2 (fixed in 9.4.2)

Published 2023-05-03. Last modified 2026-06-17.