Výsledky hledání

výrobce: Fortinet× téma: identita× v celém archivu zrušit filtry

2 karet z 2 položek CZ · EN/orig

9. 9. 2026 1

FortiMonitorOnSight JWT used for authentication in web GUI signed with static key

Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.6, CVEs: CVE-2026-84390, Summary: An Inclusion of Sensitive Information in Source Code vulnerability [CWE-540] in FortiMonitorOnSight web portal may allow a remote unauthenticated attacker to bypass authentication via forged or reused JWT

CVSS 9.6 CVE-2026-84390 Fortinet FI

tg: zranitelnost tp: identita

NCSC-FI · 9. 9. 04:00

8. 9. 2026 1

JWT used for authentication in web GUI signed with static key

CVSSv3 Score: 9.6 An Inclusion of Sensitive Information in Source Code vulnerability [CWE-540] in FortiMonitorOnSight web portal may allow a remote unauthenticated attacker to bypass authentication via forged or reused JWT Revised on 2026-09-08 00:00:00

CVSS 9.6 Fortinet US

tg: zranitelnost tp: identita

Fortinet PSIRT · 8. 9. 09:00