CVE-2024-48887

Published Apr 8, 2025·Updated Jun 17, 2026

NVD Description

A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially crafted request

Public Exploits & PoCs2 found

PoC: CVE-2024-48887-Exploit

Unverified Password Change (CWE-620)

PoC: CVE-2024-48887-FortiSwitch-Exploit

a lightweight JavaScript snippet showcasing how unauthorized password changes can be triggered on vulnerable Fortinet FortiSwitch GUI endpoints.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free