FortiAuthenticator (<= 6.4.10, 6.5.0-6.5.6, 6.6.0-6.6.8, 8.0.0-8.0.2)

A critical unauthenticated remote code execution vulnerability (CVE-2026-44277) in FortiAuthenticator caused by improper access control on API endpoints now has public proof-of-concept exploit code available.