CVE-2026-44277

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 9.1EPSS <1%

Published 2026-05-12Updated 2026-05-14

PoC

Vulnerability details

A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticator 6.6.0 through 6.6.8, FortiAuthenticator 6.5.0 through 6.5.6 may allow attacker to execute unauthorized code or commands via crafted requests.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

CNAfortinet

EPSS score history

Sources

5 links

PoC links are not available for guest users. Login to view them.

CVE Organization Bleeping Computer NVD Analysis The Hacker News The Hacker News

Profile

CVSS

9.1

EPSS

<1%

Published

2026-05-12

Updated

2026-05-14

CNA

fortinet

Vendors

Fortinet

1 product

CPEs

cpe:2.3:a:fortinet:fortiauthenticator:8.0.2:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:8.0.0:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.6.8:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.6.7:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.5.6:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.5.5:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.5.4:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.5.3:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.5.2:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.5.1:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.5.0:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.4.10:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.4.9:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.4.8:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.4.7:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.4.6:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.4.5:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.4.4:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.4.3:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.4.2:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.4.1:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiauthenticator:6.4.0:*:*:*:*:*:*:*

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated