BetaIT-Hub is in early access — your feedback helps us improve. Use the chat or email [email protected]

News›⚠ Vulnerability
⚠ VulnerabilityFortinet PSIRT·23d ago

Arbitrary log file read in administrative interface

CVSSv3 Score: 4.0 An Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability [CWE-88] in FortiDeceptor WEB UI may allow an authenticated attacker with at least read-only admin permission to read log files via HTTP crafted requests. Revised on 2026-05-12 00:00:00

Sign in to read the full article

Create a free account to access all news, downloads, and community features

Sign inCreate account

Originally published by Fortinet PSIRT

Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-138

This article is shared for informational purposes. All rights belong to the original author and publisher. If you are the copyright holder and would like this content removed, please contact us.

Shared on IT-Hub by admin