THE BASE COLLECTIONCRDS / 0.1

CVE-2022-39952CRITICAL

Fortinet FortiNAC

initial accessT1190

Fortinet's network access controller lets a request choose where a file is written, which an unauthenticated attacker turns into code execution on the appliance.

CVSS

9.8

EPSS

100%

PATCH

Vendor

Upgrade FortiNAC per Fortinet's advisory, and check the appliance for files written while it was reachable.

SCRTY:CRDS / BASE SETREV. 01 ◆

Raw JSON

One vulnerability. The facts that matter.
A clear next move.

criticalREV. 01

CVE-2022-39952Fortinet FortiNAC — External Control of a File Path

Fortinet's network access controller lets a request choose where a file is written, which an unauthenticated attacker turns into code execution on the appliance.

YOUR NEXT MOVE

Upgrade FortiNAC per Fortinet's advisory, and check the appliance for files written while it was reachable.

Read the risk

THE VITAL STATS

CVSS score: 9.8/ 10
EPSS probability: 100%
Attack complexity: Low
Known exploited: Not listed
CVE published: 2023-02-16
Exploit published: Not recorded
Confidence: medium
Kill chain: initial access
MITRE ATT&CK: T1190
Severity: critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attacker needsNetwork access to the appliance

Behind the card

2 REFERENCES

Field-level provenanceTRACE THE SOURCES +

Which source supports each field, when it was retrieved, and who extracted it.

Fields	Source	Retrieved	Extractor	Confidence
cvss, exploitation.attack_complexity, exploitation.exploit_available, references, published_at	nvd.nist.gov	2026-08-07	scrty-crds-pipeline/0.1	high
epss	api.first.org	2026-08-07	scrty-crds-pipeline/0.1	high
title, summary, severity, remediation, mitre_attack, kill_chain, recommended_action, confidence, tags, exploitation.prerequisites	nvd.nist.gov	2026-08-07	claude-code	high

Printing history

THE RECORD

r12026-09-20Initial base card

First printing. This card has not been reprinted since publication.