Missing authorization on CSV user import

0
22

CVSSv3 Score: 6.8

A missing authorization vulnerability [CWE-862] in FortiAuthenticator may allow a read-only admin to make modification to local users via a file upload to an unprotected endpoint.

Revised on 2026-02-10 00:00:00

– Read more