CVE-2023-26206: XSS

Q: What is the severity of CVE-2023-26206?

CVE-2023-26206 is categorized as a high severity vulnerability due to the potential for unauthorized code execution.

Q: How do I fix CVE-2023-26206?

To mitigate CVE-2023-26206, upgrade Fortinet FortiNAC to the latest patched version.

Q: What software versions are affected by CVE-2023-26206?

CVE-2023-26206 affects Fortinet FortiNAC versions 7.2.0, 9.1.0 to 9.1.10, 9.2.0 to 9.2.8, and 9.4.0 to 9.4.2.

Q: What type of vulnerability is CVE-2023-26206?

CVE-2023-26206 is a cross-site scripting (XSS) vulnerability due to improper input neutralization during web page generation.

Q: What potential impact does CVE-2023-26206 have?

CVE-2023-26206 allows attackers to execute unauthorized code or commands, which can compromise system security.

Published Feb 15, 2024

Updated

An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 - 9.4.2, 9.2.0 - 9.2.8, 9.1.0 - 9.1.10 and 7.2.0 allows an attacker to execute unauthorized code or commands via the name fields observed in the policy audit logs.

Affected Software

4 affected components

Fortinet FortiNAC>=9.1.0<=9.1.10

Fortinet FortiNAC>=9.2.0<=9.2.8

Fortinet FortiNAC>=9.4.0<=9.4.2

Fortinet FortiNAC=7.2.0

Remediation

Information

Please upgrade to FortiNAC version 9.4.4 or above Please upgrade to FortiNAC version 7.2.3 or above

Event History

Feb 15, 2024

CVE Published

via MITRE·01:59 PM

Data Sourced

via MITRE·01:59 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-26206?

CVE-2023-26206 is categorized as a high severity vulnerability due to the potential for unauthorized code execution.

How do I fix CVE-2023-26206?