CVE-2026-23573

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.6.0 through 7.6.6 FortiOS versions 7.4.x FortiOS versions 7.2.x FortiPAM version 1.8.0 FortiPAM versions 1.7.x FortiPAM versions 1.6.x FortiPAM versions 1.5.x FortiPAM versions 1.4.x FortiPAM versions 1.3.x FortiPAM versions 1.2.x FortiPAM versions 1.1.x FortiPAM versions 1.0.x FortiProxy versions 7.4.0 through 7.4.3 FortiProxy versions 7.2.0 through 7.2.9

Description An improper neutralization of input during web page generation, known as Cross-site Scripting (XSS), exists in the SSL-VPN component. This issue allows an authenticated remote attacker to execute arbitrary code or commands by sending specially crafted requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.