CVE-2025-59809

Name of the Vulnerable Software and Affected Versions FortiSOAR PaaS version 7.6.4 FortiSOAR PaaS versions 7.6.0 through 7.6.2 FortiSOAR PaaS versions 7.5.0 through 7.5.2 FortiSOAR PaaS versions 7.4 and earlier FortiSOAR PaaS versions 7.3 and earlier FortiSOAR on-premise version 7.6.4 FortiSOAR on-premise versions 7.6.0 through 7.6.2 FortiSOAR on-premise versions 7.5.0 through 7.5.2 FortiSOAR on-premise versions 7.4 and earlier FortiSOAR on-premise versions 7.3 and earlier

Description A server-side request forgery (SSRF) allows an authenticated attacker to discover services running on local ports via crafted requests. SSRF is a flaw where a server is tricked into making requests to an unintended location.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.