CVE-2016-8494

CVE-2016-8494: vulnerability in Fortinet Connect

Published · Updated

Follow this CVE+ Monitor Fortinet Connect

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.5%
Insufficient verification of uploaded files allows attackers with webui administrators privileges to perform arbitrary code execution by uploading a new webui theme.
Affected products
Fortinet · Fortinet Connect