Threat database

Devolutions Server versions 2026.3.13.0 and earlier contain an improper access control vulnerability in the administrative role assignment endpoint. This flaw allows an authenticated user with limited vault assignment management rights to escalate their privileges and access vault entry passwords by sending a specially crafted role assignment request.

A stack-based buffer overflow vulnerability exists in Fortinet FortiOS versions 8.0.0 and 7.6.7. This flaw may allow an unauthenticated attacker with access to the wad port to crash proxy or ZTNA sessions by sending specially crafted HTTP or HTTPS requests. The vulnerability has a high severity rating with a CVSS score of 7.5 and impacts availability without affecting confidentiality or integrity.

An SQL injection vulnerability exists in Fortinet FortiAuthenticator versions 6.6.0 through 6.6.10 and 8.0.0 through 8.0.3. This flaw allows an authenticated attacker to execute unauthorized code or commands via crafted HTTP requests. The vulnerability is classified as high severity with a CVSS score of 8.3.

A null pointer dereference vulnerability exists in Fortinet FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10. This flaw may allow an unauthenticated attacker to cause a denial of service (DoS) by sending crafted HTTP requests. The vulnerability does not impact confidentiality or integrity but results in service disruption.

A critical authentication bypass vulnerability exists in Fortinet FortiOS versions 8.0.0 through 8.0.1, 7.6.0 through 7.6.7, 7.4.0 through 7.4.12, and 7.2.0 through 7.2.13. This flaw may allow an unauthenticated attacker to broadcast Link State Advertisements (LSA) via specially crafted requests, potentially impacting system integrity and availability.

An insufficiently protected credentials vulnerability exists in Fortinet FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10. This flaw may allow an unauthenticated attacker to obtain sensitive information via HTTPS requests. The vulnerability has a high severity rating with a CVSS score of 7.5. No public exploits or patches are currently documented.

A numeric truncation error vulnerability exists in Fortinet FortiOS versions 7.2.0 through 7.2.13, 7.4.0 through 7.4.12, 7.6.0 through 7.6.7, and 8.0.0 through 8.0.1. This flaw may allow a configured iBGP neighbor to send malicious or malformed attributes that could impact all connected routers via a specially crafted request.

A format string vulnerability exists in Fortinet FortiAuthenticator versions 6.6.0 through 6.6.10 and 8.0.0 through 8.0.3. This flaw allows an authenticated privileged attacker to execute unauthorized code or commands via crafted HTTP requests. The vulnerability is classified as high severity with a CVSS score of 7.2.

An improper privilege management vulnerability exists in Fortinet FortiAuthenticator versions 6.6.0 through 6.6.10 and 8.0.0 through 8.0.3. This flaw may allow an authenticated attacker to escalate their privileges within the affected systems. The vulnerability has a high severity rating with a CVSS score of 7.2.

An out-of-bounds read vulnerability exists in multiple versions of Fortinet FortiOS, including 8.0.0 through 8.0.1, 7.6.0 through 7.6.7, and all versions of 7.4, 7.2, and 7.0. This flaw may allow a remote attacker without privileges to execute arbitrary code or commands by sending specially crafted packets.

A path traversal vulnerability exists in Fortinet FortiOS versions 7.2.0 through 7.2.13, 7.4.0 through 7.4.12, 7.6.0 through 7.6.7, and 8.0.0 through 8.0.1, as well as all versions of FortiPAM 1.0 through 1.6. This flaw may allow an unauthenticated attacker to bypass authentication by using specially crafted credentials.

A hard-coded password vulnerability exists in Fortinet FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10. This flaw may allow an unauthenticated attacker to bypass credential validation under certain conditions, potentially leading to unauthorized access.

An out-of-bounds write vulnerability exists in Fortinet FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10. This flaw may allow an unauthenticated attacker to execute unauthorized code or commands via HTTP requests if they can bypass ASLR protections. The vulnerability has a high severity rating with a CVSS score of 8.1.

An incorrect authorization vulnerability exists in Fortinet FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10. This flaw may allow an attacker to bypass authentication mechanisms and gain unauthorized access to the system.

An incorrect authorization vulnerability exists in Fortinet FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10. This flaw may allow an unauthenticated attacker to cause a denial of service (DoS) via crafted HTTP requests.

A path traversal vulnerability exists in Fortinet FortiAnalyzer and FortiManager products, including their cloud versions, across multiple 7.x and 8.x releases. This flaw allows an authenticated administrator to write arbitrary files via a specially crafted archive. The vulnerability affects versions from 7.2.x through 8.0.1 in various sub-versions. It has a high severity rating with a CVSS score of 7.2, indicating significant potential impact on confidentiality, integrity, and availability.

An incorrect authorization vulnerability exists in Fortinet FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10. This flaw may allow an attacker to bypass authentication controls and gain unauthorized access. However, full impersonation requires the attacker to have obtained certain IDs and data through other means.

An OS command injection vulnerability exists in multiple versions of Fortinet FortiAnalyzer and FortiManager products, including their cloud variants. This flaw allows an authenticated attacker to execute unauthorized commands via specially crafted HTTP requests. The vulnerability affects versions from 7.2.0 through 8.0.1 across these products. It has a high severity rating with a CVSS score of 7.2.

A stack-based buffer overflow vulnerability exists in Fortinet FortiAuthenticator versions 6.6.0 through 6.6.10 and 8.0.0 through 8.0.3. This flaw may allow an unauthenticated attacker to cause a denial of service by crashing the FSSO subsystem via specially crafted HTTP requests.

An unrestricted file upload vulnerability exists in Fortinet FortiAnalyzer and FortiManager products, including their cloud versions, across multiple versions. This flaw allows an authenticated administrator to upload arbitrary files via specially crafted requests, potentially leading to full compromise of confidentiality, integrity, and availability. The vulnerability affects FortiAnalyzer versions 7.2.0 through 8.0.1 and FortiManager versions 7.2.0 through 8.0.1, including corresponding cloud versions. The CVSS score is 7.2, indicating high severity.