Exploit for CVE-2018-13379-Fortinet

kitploit · 2026-08-25

Description

FortiVuln tool for CVE-2018-13379 in Fortinet.

Entry point

Parameterlang · query param

Path/remote/fgt_lang

Path traversal vulnerability in FortiOS SSL VPN web portal allows reading restricted files via crafted HTTP requests.

Affected software

Fortinet Fortiproxy< 1.2.9, 2.0.0

Fortinet Fortios< 5.4.13, 5.6.8, 6.0.5

All known vulnerabilities by product

Fortigate Fortios Fortiproxy

CVSS 9.8 for CVE-2018-13379

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:HIGH

CVE Information

Exploit Details

Modified:2026-08-25 04:22

Last Seen:2026-08-25 16:38

Reporter:KitPloit

Tags

FortinetFortiVulnCVE-2018-13379Exploit toolVulnerability

Other exploits for CVE-2018-13379

at-doom-fortigate

2026-09-03 KitPloitKITPLOIT

2026-09-03 KitPloitKITPLOIT

2026-09-03 KitPloitKITPLOIT

2026-09-02 KitPloitKITPLOIT

2026-09-02 KitPloitKITPLOIT

2026-09-01 KitPloitKITPLOIT

CVE-2018-13379-FortinetVPN

2026-09-01 KitPloitKITPLOIT

2026-09-01 KitPloitKITPLOIT

Exploit Code

MARKDOWN6 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-K4NFR3-CVE-2018-13379-FORTINET
# CVE-2018-13379-Fortinet

FortiVuln

![Print Screen](https://raw.githubusercontent.com/k4nfr3/CVE-2018-13379-Fortinet/main/print-screen.png?raw=true)