View Ridge Security
Back to Cyber HoseVendor Bulletins & Advisories

FortiWeb RADIUS Admin Flaw Enables Unauthenticated GUI and CLI Access

📋 ADVISORIES

  • NVIDIA Cumulus Linux and NVOS August 2026 Security Bulletin
    NVIDIA issued a high-severity security bulletin for Cumulus Linux and NVOS.

  • Dell discloses 88 third-party vulnerabilities in VPLEX
    Dell disclosed 88 third-party vulnerabilities affecting VPLEX.

    • Dell VPLEX customers and deployments are affected.
    • The advisory covers 88 vulnerabilities in multiple third-party components.
    • Dell rates the issue Critical with a CVSS score of 9.8.
    • The reported EPSS score is 1.7%.
      📎 Coverage: dell.com · 👁 via InfraTrust Advisories

  • FortiWeb RADIUS Admin Flaw Enables Unauthenticated GUI and CLI Access
    FortiWeb is vulnerable to unauthenticated administrative access through specific RADIUS settings.

    • FortiWeb deployments using Remote RADIUS Type administrator authentication are affected.
    • Affected versions include 8.0.0–8.0.2, 7.6.0–7.6.6, 7.4.0–7.4.11, and 7.2.0–7.2.12.
    • With the non-default Wildcard setting enabled, attackers can log in to the FortiWeb GUI and CLI using random usernames and passwords.
    • CVE-2026-26035 is an improper authentication flaw (CWE-287) that can grant administrative control of the web application firewall.
      📄 Source: fortiguard.fortinet.com · 📎 Coverage: cycognito.com · 👁 via InfraTrust Advisories

  • Fortinet appliances affected by HTTP/2 Bomb memory-exhaustion flaw CVE-2026-49975
    Fortinet disclosed a high-severity HTTP/2 memory-exhaustion flaw affecting three products.

    • FortiProxy, FortiPAM, and FortiSwitch Manager appliances are affected.
    • The flaw, CVE-2026-49975, can cause denial of service by exhausting system memory.
    • Affected versions include FortiProxy 7.2, 7.4.0–7.4.14, and 7.6.0–7.6.6; FortiPAM 1.0–1.8 and 1.9.0–1.9.1; and FortiSwitch Manager 7.2.0–7.2.9.
    • An unauthenticated remote attacker sends specially crafted HTTP/2 header frames that trigger disproportionate memory allocation in Apache mod_http2.
    • Public proof-of-concept exploit code is available; Fortinet reported no known exploitation in its products at disclosure.
      📄 Source: fortiguard.fortinet.com · 📎 Coverage: 1898advisories.burnsmcd.com · 👁 via InfraTrust Advisories

  • Dell BIOS Update Addresses 16 High-Severity Vulnerabilities
    Dell disclosed 16 vulnerabilities affecting multiple Client Platform BIOS models.

    • Dell Client Platform systems, including Alienware, Dell G15, Aurora, and ChengMing models, are affected.
    • The flaws affect BIOS components involving Intel chipset, processor, UEFI, and Xeon firmware.
    • Affected BIOS versions vary by model; remediated releases include Dell G15 5530 BIOS 1.34.0 and Alienware 16 Area-51 BIOS 2.5.0.
    • Dell rated the advisory High, and malicious users could exploit the vulnerabilities to compromise affected systems.
      📎 Coverage: dell.com · 👁 via InfraTrust Advisories

  • Dell warns of two high-severity AMD fTPM BIOS vulnerabilities
    Dell disclosed two high-severity AMD fTPM vulnerabilities affecting client platforms.

    • Dell client systems using AMD firmware TPM are affected.
    • CVE-2026-6726 can enable forged TPM attestations through information leakage.
    • CVE-2026-6727 exposes RSA-OAEP operations to a timing side-channel attack.
    • Exploitation requires local access with elevated privileges.
    • Affected AMD families include Ryzen 3000–9000, Ryzen AI, Threadripper, EPYC, and embedded processors.
      📄 Source: dell.com · 📎 Coverage: computerbase.de · 👁 via InfraTrust Advisories

  • fortinet-kernel-driver-heap-overflow — InfraTrust Advisories

  • fortinet-fgfm-authentication-weakening — InfraTrust Advisories

  • 📄 Source for NVIDIA Triton Inference Server Flaws Include Critical Path-Traversal DoS — nvidia.custhelp.com

🕵️ RESEARCH & DEEP DIVES

🔓 CVEs & KEV

  • CVE-2026-21580 — CVSS 9.3 — This Critical severity Stored XSS, PrivEsc (Privilege Escalation), and Security Bypass vulnerability affects multiple components and allows attackers to execute arbitrary code and escalate privileges.

  • CVE-2026-21582 — CVSS 8.8 — This High severity BASM (Broken Authentication & Session Management) vulnerability enables attackers to bypass authentication mechanisms and hijack user sessions.

  • CVE-2026-50186 — CVSS 8.8 — 4gaBoards: Path Traversal leading to Arbitrary File Read and Deletion in Boards software allows attackers to access and remove sensitive files.

  • CVE-2026-50191 — CVSS 8.8 — 4gaBoards: Pre-Account Takeover via SSO Email Linkage enables attackers to hijack accounts before users complete registration.

  • CVE-2026-52876 — CVSS 8.8 — Streambert: Arbitrary File Execution via VLC/mpv Launcher Fallback allows execution of malicious files through media player integration.

  • CVE-2026-52872 — CVSS 8.8 — Streambert: Local File Exfiltration and Overwrite via Subtitle file: Protocol handler flaw enables data theft and file manipulation.

  • CVE-2026-52854 — CVSS 8.6 — mediawiki/maps: Stored XSS through the overlays parameter in the display_map function allows persistent cross-site scripting attacks.

  • CVE-2026-52875 — CVSS 8.4 — Streambert: Arbitrary Directory Creation and File Manipulation via Backup Handler enables attackers to create directories and manipulate files.

  • CVE-2026-52877 — CVSS 8.3 — Streambert: Insecure Protocol Execution in open-external IPC Handler allows execution of untrusted protocols.

  • CVE-2026-21584 — CVSS 7.6 — This High severity Improper Authorization vulnerability was introduced in versions prior to 3.2.1 and allows unauthorized access to restricted functions.

  • CVE-2026-53958 — CVSS 7.6 — 4gaBoards: SSO Pre-Account Takeover / Hijacking via Mass Assignment enables attackers to hijack accounts using mass assignment techniques.

  • CVE-2026-52873 — CVSS 6.9 — Streambert: Global CSP Removal in Wyzie Redeem Window Enables Unconstrained Cross-Site Scripting attacks.

  • CVE-2026-53959 — CVSS 6.5 — 4gaBoards: Mass Information Disclosure (Internal PII Leakage) on /api/users through improper access controls.

Need help assessing your exposure?

Start with the free Posture Self-Check to see where you stand against the current threat landscape.

Free Posture Self-Check