Skip to content
OpenAdvisories
High · 7.9 CVE-2026-39815 EUVD-2026-22348GHSA-qwjq-mqc6-9q3h

A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiDDoS-F 7.2.1 through …

Published Apr 14, 2026 · Updated Apr 14, 2026 · Assigned by fortinet

Description

A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiDDoS-F 7.2.1 through 7.2.2 may allow attacker to execute unauthorized code or commands via sending crafted HTTP requests

Affected products

VendorProductAffectedFixed
Fortinet FortiDDoS-F 7.2.1 – ≤ 7.2.2 —

References