NewsFortinet PSIRT

    Improper certificate validation in RADIUS protocol

    Share
    CVSSv3 Score: 7.5 An Improper Certificate Validation vulnerability [CWE-295] in FortiSASE Sovereign, FortiManager, Fortianalyzer, FortiManager Cloud and FortiAnalyzer Cloud RADIUS protocol may allow a MITM attacker to impersonate the radius server via a rogue RADIUS server. Revised on 2026-11-10 00:00:00

    Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-247

    ID