Skip to content
fr Sign in
7.3 High

CVE-2026-22828 A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.6.2…

Description

A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.6.2 through 7.6.4 may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests. Successful exploitation would require a large amount of effort in preparation because of ASLR and network segmentation

Affected products and versions

Product Affected versions Fixed in
FortiAnalyzer Cloud 7.6 7.6.2 → 7.6.4 No fix stated
FortiManager Cloud 7.6 7.6.2 → 7.6.4 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiAnalyzer Cloud

The 14 CVEs of FortiAnalyzer Cloud →
CVE-2025-46773 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]… 7.9 High CVE-2026-23707 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]… 6.5 Medium CVE-2026-23706 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]… 5.9 Medium CVE-2025-68649 An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet… 5.4 Medium
Track this CVE