NewsFortinet PSIRT

    SSLVPN Improper Certificate Validation

    Share
    CVSSv3 Score: 7.7 An improper certificate validation vulnerability [CWE-295] in FortiOS SSLVPN may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the SSLVPN web portal and the backend destination website. Revised on 2026-11-12 00:00:00

    Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-193

    ID