CVE-2026-23706

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 7.6.0 through 7.6.4 FortiAnalyzer versions 7.4.0 through 7.4.7 FortiAnalyzer version 7.2 FortiAnalyzer Cloud versions 7.6.2 through 7.6.4 FortiAnalyzer Cloud versions 7.4.1 through 7.4.7 FortiAnalyzer Cloud versions 7.2.1 through 7.2.11 FortiManager versions 7.6.0 through 7.6.4 FortiManager versions 7.4.0 through 7.4.6 FortiManager version 7.2

Description An SQL Injection issue exists where improper neutralization of special elements used in an SQL command allows a low privileged user to execute arbitrary commands and perform arbitrary file read and write operations via crafted requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.