CVE-2022-26117
Status: ModifiedHigh (8.8)—
An empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.3 and below may allow an authenticated attacker to access the MySQL databases via the CLI.
CVSS
- Version: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Base score: 8.8
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 0.98%
- Percentile among all scored CVEs: 61
- Score date: 10/6/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-521
References
Raw JSON (NVD)
Show
{
"id": "CVE-2022-26117",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2022-26117",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2024-10-23T14:12:35.607605Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@fortinet.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8.8,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.8
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8.8,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "psirt@fortinet.com",
"affectedData": [
{
"vendor": "Fortinet",
"product": "Fortinet FortiNAC",
"versions": [
{
"status": "affected",
"version": "FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.3 and below."
}
]
}
]
}
],
"published": "2022-07-18T18:15:09.017",
"references": [
{
"url": "https://fortiguard.com/psirt/FG-IR-22-058",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@fortinet.com"
},
{
"url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-r259-5p5p-2q47",
"tags": [
"Third Party Advisory"
],
"source": "psirt@fortinet.com"
},
{
"url": "https://fortiguard.com/psirt/FG-IR-22-058",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-r259-5p5p-2q47",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-521"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.3 and below may allow an authenticated attacker to access the MySQL databases via the CLI."
},
{
"lang": "es",
"value": "Una vulnerabilidad de contraseña vacía en el archivo de configuración [CWE-258] en FortiNAC versiones 8.3.7 y anteriores, 8.5.2 y anteriores, 8.5.4, 8.6.0, 8.6.5 y anteriores, 8.7.6 y anteriores, 8.8.11 y anteriores, 9.1.5 y anteriores, 9.2.3 y anteriores puede permitir a un atacante autenticado acceder a las bases de datos MySQL por medio de la CLI"
}
],
"lastModified": "2026-06-17T04:34:43.077",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B25CF57-8771-436D-8B57-EE67D9F47570",
"versionEndIncluding": "8.5.2",
"versionStartIncluding": "8.5.0"
},
{
"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81E4D361-D753-4931-83A7-9085A1B74425",
"versionEndIncluding": "8.6.5",
"versionStartIncluding": "8.6.2"
},
{
"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3BD32B25-76B4-4D6E-BB5C-065070297058",
"versionEndIncluding": "8.7.6",
"versionStartIncluding": "8.7.0"
},
{
"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46929BE3-0396-4B8A-9889-9F6CA73FAD4E",
"versionEndIncluding": "8.8.11",
"versionStartIncluding": "8.8.0"
},
{
"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D6DF60A-302A-4602-9DA3-282177BB31DC",
"versionEndExcluding": "9.1.6",
"versionStartIncluding": "9.1.0"
},
{
"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6784AAA4-8FE1-4AEA-A9F1-8489FCF78301",
"versionEndExcluding": "9.2.4",
"versionStartIncluding": "9.2.0"
},
{
"criteria": "cpe:2.3:a:fortinet:fortinac:8.3.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "952F266E-0E48-4D69-81E0-9F813B60AC3E"
},
{
"criteria": "cpe:2.3:a:fortinet:fortinac:8.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "374069A0-1A0D-45B7-B59D-DA3AA3855444"
},
{
"criteria": "cpe:2.3:a:fortinet:fortinac:8.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C11F0FBF-985B-4053-9B16-AA7173BCCC21"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@fortinet.com"
}