Threat database

CVE-2026-106175 is a low-severity denial of service vulnerability in Fortinet FortiSwitch and related Fortinet products. It is caused by a double free flaw that may allow a local authenticated attacker to crash the newcli daemon by sending crafted CLI commands. The vulnerability affects multiple versions of FortiSwitch, FortiOS, and FortiProxy. An official fix is available to address this issue.

CVE-2026-106172 is a medium severity vulnerability in Fortinet FortiSandbox versions 4.4.x, 5.0.x, and 5.2.x, including certain Cloud versions. It involves the use of a hard-coded cryptographic key that may allow an attacker to escalate privileges via specially crafted HTTP requests. An official fix is available for this issue.

CVE-2026-23707 is an SQL Injection vulnerability affecting multiple versions of Fortinet FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud products. It allows a low privileged user to execute arbitrary commands via crafted requests. The vulnerability has a CVSS score of 6.5, indicating medium severity. An official fix is available for the affected versions.

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.1 through 7.4.6, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 through 7.4.6, FortiAnalyzer Cloud 7.2.1 through 7.2.9, FortiManager 7.6.0 through 7.6.2, FortiManager 7.4.0 through 7.4.6 may allow a low privileged user to execute arbitrary commands via crafted requests.

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.6, FortiAnalyzer 7.2.0 through 7.2.12, FortiManager 7.4.0 through 7.4.6, FortiManager 7.2 all versions may allow a low privileged user to execute arbitrary commands via crafted requests.

CVE-2025-46773 is a high-severity SQL Injection vulnerability in Fortinet FortiAnalyzer and FortiAnalyzer Cloud versions 7.2.x, 7.4.x, and 7.6.x. It allows a low privileged user to execute arbitrary commands via crafted requests. The vulnerability affects multiple specific version ranges of FortiAnalyzer and FortiAnalyzer Cloud. An official fix is available from the vendor.

CVE-2025-57739 is a high-severity SQL Injection vulnerability in Fortinet FortiMail versions 7.2.0 through 7.2.8, 7.4.0 through 7.4.5, and 7.6.0 through 7.6.3. It allows an authenticated attacker to execute unauthorized code or commands via crafted HTTP or HTTPS requests. The vulnerability has an official fix available.

CVE-2026-106170 is a denial of service vulnerability in Fortinet FortiSandbox versions 4.4.0 through 4.4.10, 5.0.0 through 5.0.6, and 5.2.0 through 5.2.1. It allows a privileged attacker to cause persistent denial of access to the GUI and CLI by sending crafted HTTP requests. The vulnerability is due to an uncaught exception. An official fix is available.

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.

CVE-2026-106176 is a missing authorization vulnerability in Fortinet FortiSIEM versions 6.4.0 through 7.5.1 that may allow an attacker with high privileges to execute unauthorized code or commands via specially crafted HTTP requests. The vulnerability has a low severity score of 3.4 and does not impact confidentiality but may affect integrity and availability. An official patch is available to remediate this issue.

CVE-2026-106171 is an OS command injection vulnerability in Fortinet FortiManager versions 7.6.0 through 7.6.6, 7.6.2 through 7.6.6 (FortiManager Cloud), and 8.0.0. This flaw allows an attacker with high privileges to escalate their privileges by sending specially crafted packets. The vulnerability has a medium severity rating and a CVSS score of 5.3. An official fix is available from Fortinet.

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.

A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may allow attacker to improper access control via <insert attack vector here>

CVE-2026-84392 is a low-severity denial of service vulnerability in multiple Fortinet products including FortiOS, FortiPAM, and FortiProxy. It involves a NULL Pointer Dereference that can be triggered by an authenticated attacker sending crafted HTTP requests to crash the httpsd daemon. The vulnerability affects numerous versions across these products. An official fix is available to address this issue.

An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.4.1 through 7.4.10, FortiManager Cloud 7.2 all versions may allow an administrator to bypass the approval process for workflow sessions via crafted HTTP or HTTPs requests.

A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via <insert attack vector here>

CVE-2026-84393 is a high severity vulnerability in Fortinet FortiOS and FortiProxy versions 7.6.1 through 7.6.6. It involves improper validation of certificates with host mismatches, which may allow an attacker to cause information disclosure. The vulnerability has a CVSS score of 7.3 and has an official fix available.

A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests.

A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.6, FortiSOAR on-premise 7.5.0 through 7.5.3, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow attacker to escalation of privilege via <insert attack vector here>

A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via <insert attack vector here>