cybersecplayground/CVE-2024-48887-FortiSwitch-Exploit

PoC

a lightweight JavaScript snippet showcasing how unauthorized password changes can be triggered on vulnerable Fortinet FortiSwitch GUI endpoints.

view exploit source poc_in_githubauthor cybersecplaygroundpublished 2025-04-09catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-48887US	—	15.7% (97th)	Exploit	2025-04-08
A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially crafted request

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.