CVE-2023-27993: Fortinet FortiADC

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

A relative path traversal [CWE-23] in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a privileged attacker to delete arbitrary directories from the underlying file system via crafted CLI commands.

Affected products

• Fortinet FortiADC: from 5.2.0, up to and including 7.0.5; from 7.1.0, before 7.1.2 (fixed in 7.1.2); version 7.2.0 only

Published 2023-05-03. Last modified 2026-06-17.