CVE-2019-5591CISA KEVEPSS p97.2%

CVE-2019-5591Fortinet FortiOS Default Configuration Vulnerability

Fortinet / FortiOS

Description

Fortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the Lightweight Directory Access Protocol (LDAP) server.

Scoring

CVSS 6.5 ()
VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS18.42% probability of exploitation · percentile 97.2% · 2026-10-05T12:00:23Z
Last modified2026-08-15

CISA KEV entry

Added to KEV: 2021-11-03

(incoming)1

TypeTargetConfidenceTier
KEVEntryFortinet FortiOS Default Configuration Vulnerabilitykev-cve-2019-55910%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Fortinet FortiOS and FortiADC Improper Access Control Vulnerability
CVE
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
CVE
Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability
CVE
CVE-2026-22153
CVE
Fortinet FortiOS and FortiProxy Improper Authorization
CVE
Fortinet Multiple Products Authentication Bypass Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.