CVE-2026-23707
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
An SQL Injection vulnerability (CWE-89) in Fortinet FortiAnalyzer and FortiManager (including Cloud versions) allows a low-privileged user to execute arbitrary commands via crafted requests. It affects multiple versions of Fortinet software.
Risk Assessment
An attacker with basic privileges can take control of the FortiAnalyzer/FortiManager system, potentially leading to data leakage, configuration changes, or further network penetration.
Recommendation
Update FortiAnalyzer, FortiManager, and their Cloud versions to the latest patched releases as recommended by Fortinet.
Other vulnerabilities in Fortinet FortiAnalyzer/FortiManager
See all- CVE-2026-23705High
An SQL Injection vulnerability (CWE-89) in Fortinet FortiAnalyzer and FortiManager allows a low-privileged user to execute arbitrary commands via crafted requests. It affects multiple versions of these products.
- CVE-2025-67604Medium
A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer and FortiManager allows an authenticated attacker to cause a system hang via multiple specially crafted HTTP requests causing crashes. Exploitation depends on internal locks being aligned, which is out of the attacker's control.
- CVE-2025-68649Medium
A path traversal vulnerability in Fortinet FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests. The issue stems from improper limitation of a pathname to a restricted directory.
Original NVD description (English source)
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.11, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.6, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 through 7.6.4 may allow a low privileged user to execute arbitrary commands via crafted requests.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS