High WID-SEC-2026-3935 4 CVEs

Fortinet FortiAnalyzer und FortiManager: Mehrere Schwachstellen ermöglichen SQL-Injection

Published Oct 13, 2026 · Updated Oct 13, 2026 · de-DE

Vendor: Fortinet Product: FortiAnalyzer Product: FortiManager

Summary

Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiAnalyzer und Fortinet FortiManager ausnutzen, um einen SQL-Injection Angriff durchzuführen.

Product

FortiAnalyzer ist eine Plattform zur Protokollverwaltung, Analyse und Berichterstellung.
FortiManager Security Management Appliances ermöglicht die Verwaltung von Fortinet Network Security Geräten.

Vulnerabilities 4

High 7.9

CVE-2025-46773

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerab…

Fortinet FortiAnalyzer FortiAnalyzer Cloud Network devices

Oct 13, 2026
Medium 6.5

CVE-2026-23705

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerab…

Fortinet FortiManager FortiAnalyzer Network devices

Oct 13, 2026
Medium 6.5

CVE-2026-23707

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerab…

Fortinet FortiManager FortiAnalyzer FortiManager Cloud Network devices

Oct 13, 2026
Medium 5.9

CVE-2026-23706

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerab…

Fortinet FortiManager FortiAnalyzer FortiAnalyzer Cloud Network devices

Oct 13, 2026

Revision history

2026-10-13 #1
Initiale Fassung

References

FortiGuard Labs PSIRT Advisory FG-IR-26-178 vom 2026-10-13
https://www.fortiguard.com/psirt/FG-IR-26-178