Vulnerability Database

308,485

Total vulnerabilities in the database

CVE-2021-22126

A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3 to 8.3.2, version 8.2.7 to 8.2.6 may allow a local, authenticated attacker to connect to the managed Access Point (Meru AP and FortiAP-U) as root using the default hard-coded username and password.

  • Published: Mar 17, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2021-22126
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.7
  • AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWEs:

OWASP TOP 10:

Software From Fixed in
fortinet / fortiwlc 8.3.2 8.3.2.x
fortinet / fortiwlc 8.2.6 8.2.6.x
fortinet / fortiwlc 8.2.7 8.2.7.x
fortinet / fortiwlc 8.3.3 8.3.3.x
fortinet / fortiwlc 8.4.0 8.5.3