CVE-2023-48785: Fortinet Fortinac-F

Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days.

An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the HTTPS communication channel between the FortiOS device, an inventory, and FortiNAC-F.

Affected products

• Fortinet Fortinac-F: from 7.2.0, before 7.2.5 (fixed in 7.2.5)

Published 2025-03-14. Last modified 2026-06-17.