CVE-2026-23708: High severity Fortinet FortiSOAR PaaS vulnerability
A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5.0 through 7.5.2 may allow an unauthenticated attacker to bypass authentication via replaying captured 2FA request. The attack requires being able to intercept and decrypt authentication traffic and precise timing to replay the request before token expiration, which raises the attack complexity.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23708?
CVE-2026-23708 is classified as a high severity vulnerability due to improper authentication allowing unauthenticated access.
How do I fix CVE-2026-23708?
To fix CVE-2026-23708, upgrade Fortinet FortiSOAR PaaS or on-premise to versions 7.6.4 or 7.5.3 or later.
What platforms are affected by CVE-2026-23708?
CVE-2026-23708 affects Fortinet FortiSOAR PaaS versions 7.6.0 to 7.6.3 and 7.5.0 to 7.5.2, as well as FortiSOAR on-premise in the same versions.
Can CVE-2026-23708 be exploited remotely?
Yes, CVE-2026-23708 can be exploited remotely by unauthenticated attackers if the affected systems are not properly updated.
What types of attacks can CVE-2026-23708 enable?
CVE-2026-23708 enables attackers to bypass authentication and potentially gain unauthorized access to sensitive data.