A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiADC 7.6.0 throug

Summary

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiADC 7.6.0 through 7.6.1, FortiADC 7.4.0 through 7.4.6, FortiADC 7.2.0 through 7.2.7, FortiADC 7.1.0 through 7.1.4, FortiADC 7.0 all versions, FortiADC 6.2 all versions, FortiADC 6.1 all versions, FortiADC 6.0 all versions, FortiADC 5.4 all versions, FortiADC 5.3 all versions, FortiADC 5.2 all versions, FortiADC 5.1 all versions, FortiADC 5.0 all versions, FortiADC 4.8 all versions, FortiADC 4.7 all versions, FortiADC 4.6 all versions, FortiADC 4.5 all versions, FortiADC 4.4 all versions, FortiADC 4.3 all versions, FortiADC 4.2 all versions, FortiADC 4.1 all versions, FortiADC 4.0 all versions, FortiADC 3.2 all versions, FortiADC 3.1 all versions, FortiADC 3.0 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>

Timeline

1. Jun 10, 2025, 4:36 PM UTCCVE published
2. Jun 11, 2025, 4:01 AM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: total

3. Aug 31, 2026, 11:58 AM UTCRecord last updated

Affected versions

• Fortinet FortiADC

  From 7.6.0 · through 7.6.1; From 7.4.0 · through 7.4.6; From 7.2.0 · through 7.2.7; From 7.1.0 · through 7.1.4; From 7.0.0 · through 7.0.6; From 6.2.0 · through 6.2.6; From 6.1.0 · through 6.1.6; From 6.0.0 · through 6.0.4; From 5.4.0 · through 5.4.5; From 5.3.0 · through 5.3.7; From 5.2.0 · through 5.2.8; From 5.1.0 · through 5.1.7; From 5.0.0 · through 5.0.4; From 4.8.3 · through 4.8.8; From 4.8.0 · through 4.8.1; From 4.7.0 · through 4.7.3; From 4.6.0 · through 4.6.2; From 4.5.0 · through 4.5.4; From 4.4.0 · through 4.4.1; From 4.3.0 · through 4.3.2; From 4.2.0 · through 4.2.3; From 4.1.0 · through 4.1.1; From 4.0.0 · through 4.0.2; From 3.2.0 · through 3.2.2

References 1