CVE-2016-8491: The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized...

Security readout for executives and security teams

Fortinet FortiWLC contains a hardcoded account named "core" that can give unauthorized users remote shell read/write access. For executives, the concern is direct administrative-style access to wireless controller systems if affected FortiWLC versions are reachable. Exposure is likely limited to organizations running the listed Fortinet FortiWLC versions, especially where remote shell or management access is reachable from untrusted networks. High priority if FortiWLC is in use. Confirm exposure quickly, contain management access, and follow Fortinet guidance because the issue involves unauthorized remote shell read/write capability. Mitigation focus: Check Fortinet advisory FG-IR-16-065 for vendor-directed remediation.; Identify and prioritize FortiWLC systems running listed affected versions.; Restrict FortiWLC management and remote shell access to trusted administrative networks..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.