CVE-2026-23705

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 7.6.0 through 7.6.4 FortiAnalyzer versions 7.4.0 through 7.4.7 FortiAnalyzer version 7.2 FortiManager versions 7.6.0 through 7.6.4 FortiManager versions 7.4.0 through 7.4.6 FortiManager version 7.2

Description An SQL Injection issue occurs due to improper neutralization of special elements used in an SQL command. This flaw allows a low privileged user to execute arbitrary commands and perform multiple arbitrary file read and write operations via crafted requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.