Fortinet FortiNAC Cross-Site Scripting Vulnerability

CVE-2023-26206

What is CVE-2023-26206?

A vulnerability exists in Fortinet's FortiNAC due to improper neutralization of user input during the web page generation process. This issue, identified in multiple versions of the product, can be exploited by attackers to inject and execute unauthorized commands or code. The attack vectors are primarily related to the input fields found in policy audit logs. If successfully exploited, this could lead to significant security breaches, allowing attackers to manipulate the application's behavior or access sensitive data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References