Fortinet has patched a critical vulnerability impacting multiple versions of their network access control solution. The flaw, tracked as CVE-2023-33299, received a CVSS score of 9.6/10 and is a Java deserialization of untrusted data vulnerability in FortiNAC that could be exploited by threat actors to conduct remote code execution (RCE). A remote unauthenticated attacker could exploit this vulnerability by sending maliciously crafted requests to the FortiNAC service running on TCP port 1050. Alongside this vulnerability, a medium severity flaw was also patched. This vulnerability is tracked as CVE-2023-33300 (CVSS 4.8/10) and is a command injection vulnerability caused by improper neutralization of special elements used in commands. It affects a smaller subset of versions of FortiNAC allowing an unauthenticated attacker to copy files stored locally on the device. However, it does not allow the attacker to access the files without first compromising a privileged user account or escalating their privileges. Both flaws were disclosed to Fortinet by a security researcher named Florian Hauser with CODE WHITE GmbH, who was inspired by the disclosure of a February 2023 FortiNAC vulnerability that was actively exploited in the wild. Both vulnerabilities have been patched, and CTIX analysts recommend that any administrators responsible for FortiNAC devices patch the flaws immediately.