EIP-2026-101747

PRE-CVE

Fortinet FCM-MB40 - Cross-Site Request Forgery / Remote Command Execution

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-101747. PoCs published by XORcat.

AI-analyzed exploit summary This exploit leverages a CSRF vulnerability in Fortinet FCM-MB40 to achieve remote command execution as root. It uses a crafted HTML page with JavaScript to send malicious requests that modify a configuration file and execute arbitrary commands via a reverse shell.

Description

Fortinet FCM-MB40 - Cross-Site Request Forgery / Remote Command Execution

Exploits (1)

exploitdb WORKING POC
by XORcat · htmlwebappshardware
https://www.exploit-db.com/exploits/47033

This exploit leverages a CSRF vulnerability in Fortinet FCM-MB40 to achieve remote command execution as root. It uses a crafted HTML page with JavaScript to send malicious requests that modify a configuration file and execute arbitrary commands via a reverse shell.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Fortinet FCM-MB40 v1.2.0.0
Auth required
Prerequisites: Admin user must be logged in to the FCM-MB40 · Attacker must know the target IP address · Netcat listener must be set up on the attacker's machine
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026