CVE-2026-44277
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 9.1epss 0.6%
from disclosure to weapon1 days
Published on NVDMay 12
1st PoC+1d
exploitation probability
0.6%top 56% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticator 6.6.0 through 6.6.8, FortiAuthenticator 6.5.0 through 6.5.6 may allow attacker to execute unauthorized code or commands via crafted requests.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
Affected products
Fortinet · FortiAuthenticatorpublic PoCs found — 1
githubgithub.com/0xBlackash/CVE-2026-44277★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.