What’s Vulnerable › Vulnerabilities

CVE-2016-8494

• Severity: high (CVSS 7.2 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-02-09 · updated 2026-06-17
• Weakness: CWE-264

Description

Insufficient verification of uploaded files allows attackers with webui administrators privileges to perform arbitrary code execution by uploading a new webui theme.

Affected products

• Fortinet Connect: 14.2, 14.10, 15.10, 16.7

References

• http://www.securityfocus.com/bid/96159
• https://fortiguard.com/advisory/FG-IR-16-080
• http://www.securityfocus.com/bid/96159
• https://fortiguard.com/advisory/FG-IR-16-080

Get alerted when CVE-2016-8494 or the next vulnerability affects your stack