CVE-2023-40721

score

<0.1

cvss

6.7

epss

0.2%

published

2025-02-11

kev added

—

first seen

2026-10-21

Fortinet FortiOS 7.4.0-7.4.1, before 7.2.6; FortiProxy before 7.2.7; FortiPAM before 1.0.3; FortiSwitchManager 7.2.0-7.2.2, before 7.0.2 contain a use of externally-controlled format string caused by crafted requests, letting privileged attackers execute arbitrary code or commands, exploit requires privileged access.