AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-26206

MEDIUM · CVSS 6.8 EPSS 0.47%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-02-15 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.8. It affects Fortinet.

CVE
CVE-2023-26206
Severity
MEDIUM
CVSS
6.8
EPSS
0.47%
Fortinet

Original NVD Description

An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 - 9.4.2, 9.2.0 - 9.2.8, 9.1.0 - 9.1.10 and 7.2.0 allows an attacker to execute unauthorized code or commands via the name fields observed in the policy audit logs.

Related CVEs

Other vulnerabilities affecting the same vendor(s)