7.3
Élevée
CVE-2026-22828 A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.6.2…
Description
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.6.2 through 7.6.4 may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests. Successful exploitation would require a large amount of effort in preparation because of ASLR and network segmentation
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FortiAnalyzer Cloud 7.6 | 7.6.2 → 7.6.4 | Pas de correctif indiqué |
| FortiManager Cloud 7.6 | 7.6.2 → 7.6.4 | Pas de correctif indiqué |
Autres CVE de FortiAnalyzer Cloud
Les 14 CVE de FortiAnalyzer Cloud →
CVE-2025-46773
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]…
7.9
Élevée
CVE-2026-23707
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]…
6.5
Moyenne
CVE-2026-23706
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]…
5.9
Moyenne
CVE-2025-68649
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet…
5.4
Moyenne