Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in Fortinet FortiNAC-F 7.6.0 through 7.6.5, FortiNAC-F 7.4 all versions, FortiNAC-F 7.2 all versions may allow a remote privileged attacker with system administrator role to redirect users to an arbitrary website via crafted CSV file.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-21741 An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in Fortinet FortiNAC-F 7.6.0 through 7.6.5, FortiNAC-F 7.4 all versions, … https://www.cve.org/CVERecord?id=CVE-2026-21741
Post summary
The text discloses CVE-2026-21741, an open‑redirect flaw affecting multiple FortiNAC‑F versions, but does not provide a PoC, exploit, or mitigation.
📝 CVE-2026-21741: Fortinet (CVSS: 2.2)... Admin-only open redirect via CSV upload on FortiNAC-F - classic social engineering vector disguised as a low-severity f... https://zerodaysignal.com/vulnerability/CVE-2026-21741 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The tweet discloses a low‑severity CVE (CVE‑2026‑21741) affecting Fortinet's FortiNAC‑F, detailing an admin‑only open redirect via CSV upload, but offers no PoC, exploit, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | fortinet | fortinac-f | - | - | - |