CVE-2024-23105: Fortinet Fortiportal

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A Use Of Less Trusted Source [CWE-348] vulnerability in Fortinet FortiPortal version 7.0.0 through 7.0.6 and version 7.2.0 through 7.2.1 allows an unauthenticated attack to bypass IP protection through crafted HTTP or HTTPS packets.

Affected products

• Fortinet Fortiportal: from 7.0.0, up to and including 7.0.6; version 7.2.0 only; version 7.2.1 only

Published 2024-05-14. Last modified 2026-06-17.