{"id":"CVE-2026-21741","title":"An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in Fortinet FortiNAC-F 7.6.0 through 7.6.5, FortiNAC-F 7.4 all versions, FortiNAC-F 7.2 all versions may allow a remote privileged attacker with…","summary":"An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in Fortinet FortiNAC-F 7.6.0 through 7.6.5, FortiNAC-F 7.4 all versions, FortiNAC-F 7.2 all versions may allow a remote privileged attacker with…","severity":"low","cvss":2.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C","cvssSource":"cna","cwe":["CWE-601"],"vendor":"Fortinet","product":"FortiNAC-F","affected":["FortiNAC-F >= 7.6.0 <= 7.6.5","FortiNAC-F >= 7.4.0 <= 7.4.4","FortiNAC-F >= 7.2.0 <= 7.2.9"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-04-14T16:15:45.406424Z"},"published":"2026-04-14","updated":"2026-11-06","sourceUpdated":"2026-11-06T15:42:05.719Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-21741","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-118","label":"https://fortiguard.fortinet.com/psirt/FG-IR-26-118"}],"tags":["cve.org"],"epss":0.00209,"epssPercentile":0.11149,"ingestedAt":"2026-11-06T15:54:03.989Z","slug":"CVE-2026-21741","body":"## Overview\n\nAn URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in Fortinet FortiNAC-F 7.6.0 through 7.6.5, FortiNAC-F 7.4 all versions, FortiNAC-F 7.2 all versions may allow a remote privileged attacker with system administrator role to redirect users to an arbitrary website via crafted CSV file.\n\n## Affected\n\n- `FortiNAC-F >= 7.6.0 <= 7.6.5`\n- `FortiNAC-F >= 7.4.0 <= 7.4.4`\n- `FortiNAC-F >= 7.2.0 <= 7.2.9`\n\n## Remediation\n\nUpgrade to FortiNAC-F version 7.6.6 or above","depth":"sunlit","depthScore":12,"depthScoreParts":{"impact":12.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}