All packages
FortiAnalyzer vulnerabilities
3 known CVE vulnerabilities in FortiAnalyzer, translated and rated.
- CVE-2026-84391Medium
A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow an attacker to cause denial of service. The attack vector is not specified.
- CVE-2025-61848High
An SQL injection vulnerability in Fortinet FortiAnalyzer, FortiManager and related products (listed versions) may allow a privileged authenticated attacker to execute unauthorized code or commands via JSON RPC API.
- CVE-2025-54973Medium
A race condition vulnerability in Fortinet FortiAnalyzer allows an attacker to bypass FortiCloud SSO authorization via crafted requests. Affects versions 7.0.0-7.0.13, 7.2.0-7.2.10, 7.4.0-7.4.6, 7.6.0-7.6.2.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS