CVE-2023-45584

score

<0.1

cvss

6.6

epss

0.6%

published

2025-08-12

kev added

—

first seen

2026-10-21

Fortinet FortiOS 7.4.0, 7.2.0 through 7.2.5, before 7.0.12, FortiProxy 7.4.0 through 7.4.1, 7.2.0 through 7.2.7, before 7.0.13, and FortiPAM 1.1.0 through 1.1.2 and before 1.0.3 contain a command injection caused by double free vulnerability, letting privileged attackers execute arbitrary code via crafted HTTP/HTTPS requests.