https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-33300.htmlhttps://patchthecve.com/cve/CVE-2023-33300.htmlWed, 17 Jun 2026 06:01:31 +0000MEDIUM 5.3: A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and earlier, 9.4.3 and earlier allows attacker a limited, unauthorized file access via specifically crafted request in inter-server communication port.https://patchthecve.com/cve/CVE-2024-31488.htmlhttps://patchthecve.com/cve/CVE-2024-31488.htmlWed, 17 Jun 2026 07:28:32 +0000MEDIUM 6.8: An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 through 9.1.10, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 7.2.0 through 7.2.3 may allow a remote authenticated attacker to perform stored and rehttps://patchthecve.com/cve/CVE-2023-26206.htmlhttps://patchthecve.com/cve/CVE-2023-26206.htmlWed, 17 Jun 2026 05:42:49 +0000MEDIUM 6.8: An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 - 9.4.2, 9.2.0 - 9.2.8, 9.1.0 - 9.1.10 and 7.2.0 allows an attacker to execute unauthorized code or commands via the name fields observed in the policy audit logs.