https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-32584.htmlhttps://patchthecve.com/cve/CVE-2021-32584.htmlWed, 17 Jun 2026 03:53:13 +0000MEDIUM 5.3: An improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 and below, version 8.2.7 to 8.2.4, version 8.1.3 may allow an unauthenticated and remote attacker to access certain areas of the web management CGI functionalhttps://patchthecve.com/cve/CVE-2021-26087.htmlhttps://patchthecve.com/cve/CVE-2021-26087.htmlWed, 17 Jun 2026 03:42:50 +0000MEDIUM 4.3: An improper neutralization of input during web page generation in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 web interface may allow both authenticated remote attackers and non-authenticated attackers in the same network as the appliance to perform a storhttps://patchthecve.com/cve/CVE-2021-22126.htmlhttps://patchthecve.com/cve/CVE-2021-22126.htmlWed, 17 Jun 2026 03:36:39 +0000MEDIUM 6.7: A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3 to 8.3.2, version 8.2.7 to 8.2.6 may allow a local, authenticated attacker to connect to the managed Access Point (Meru AP and FortiAP-U) as root using the default hard-coded usernahttps://patchthecve.com/cve/CVE-2021-26093.htmlhttps://patchthecve.com/cve/CVE-2021-26093.htmlWed, 17 Jun 2026 03:42:51 +0000HIGH 7.3: An access of uninitialized pointer (CWE-824) vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a local and authenticated attacker to crash the access point being managed by the controller by executing a crafted CLI command.