CVE-2025-49813
An improper neutralization of special elements used in an OS Command ("OS Command Injection") vulnerability [CWE-78] in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a remote and authenticated attacker with low privilege to execute unauthorized code via specifically crafted HTTP parameters.
Vendor
Product
CWE
Yayın Tarihi
2025-08-12 19:15:30
Güncelleme
2025-08-15 12:26:02
Source Identifier
psirt@fortinet.com
KEV Date Added
-