NewsFortinet PSIRT
Improper neutralization of special elements in output used by a downstream component in sshd
Teaser from the source
CVSSv3 Score: 7.4 A Path Traversal vulnerability [cwe-24] in FortiOS, FortiSASE, FortiProxy and FortiPam ssh daemon may allow an unauthenticated attacker to bypass authentication via specially crafted credentials. Revised on 2026-11-10 00:00:00
This is the RSS-feed teaser. Read the full article at the original source.
Read at Fortinet PSIRTMore on neutralization
Other advisories
- CriticalCVE-2026-121896Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbit…
- CriticalCVE-2026-121898Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbit…
- CriticalCVE-2026-121908Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbit…
- HighCVE-2026-121350Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to disclos…
- HighCVE-2026-121900Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbit…
- CriticalCVE-2026-121894Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbit…
- CriticalCVE-2026-121353Adobe Connect is affected by an Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability that could result in arbitrary code execution in t…
- CriticalCVE-2026-121902Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbit…
Other news entries
- Improper neutralization of special elements used in a template engine in fortisocNewsFortinet PSIRT
- Improper neutralization of special elements used in an OS commandNewsFortinet PSIRT
- Improper neutralization of special elements used in an os commandNewsFortinet PSIRT
- Improper neutralization of special elements used in an os command in GUINewsFortinet PSIRT
- Improper neutralization of special elements used in an SQL commandNewsFortinet PSIRT
- Improper neutralization of special elements used in a template engineNewsFortinet PSIRT
- Improper limitation of a pathname to a restricted directoryNewsFortinet PSIRT
- Improper neutralization of special elements used in an SQL commandNewsFortinet PSIRT
Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-269
ID