Vulnerabilidad · Publicado 13/10/2026 · Actualizado 14/10/2026
Fortinet PSIRT publica advisory de seguridad: arbitrary command execution in fgfmsd daemon. Tipo: Inyección de Comandos OS. Producto afectado: Fortimanager.
CVSSv3 Score: 5.3 An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiManager fgfmd daemon may allow a remote attacker impersonating a fortimanager cluster node to execute unauthorized code or commands via specially crafted packets. Impersonation of a Fortimanager cluster node requires possessing the node's certificate and private key. Revised on 2026-10-13 00:00:00
Advisory publicado por Fortinet Product Security Incident Response Team (PSIRT).