Aller au contenu
en Se connecter
6.7 Moyenne

CVE-2026-23708 A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through…

Description

A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5.0 through 7.5.2 may allow an unauthenticated attacker to bypass authentication via replaying captured 2FA request. The attack requires being able to intercept and decrypt authentication traffic and precise timing to replay the request before token expiration, which raises the attack complexity.

Produits et versions touchés

Produit Versions touchées Corrigé en
FortiSOAR PaaS 7.6 7.6.0 → 7.6.3 Pas de correctif indiqué
FortiSOAR PaaS 7.5 7.5.0 → 7.5.2 Pas de correctif indiqué
FortiSOAR on-premise 7.6 7.6.0 → 7.6.3 Pas de correctif indiqué
FortiSOAR on-premise 7.5 7.5.0 → 7.5.2 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de FortiSOAR PaaS

Les 11 CVE de FortiSOAR PaaS →
CVE-2026-84385 A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through… 4.9 Moyenne CVE-2026-22573 An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR… 6.2 Moyenne CVE-2025-59809 A server-side request forgery (ssrf) vulnerability [CWE-918] vulnerability in Fortinet FortiSOAR PaaS 7.6.4, FortiSOAR… 4.1 Moyenne CVE-2026-21742 A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3,… 5.4 Moyenne
Suivre cette CVE