CVE-2026-25088: SQL Injection
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0 through 7.4.9, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Fortinet FortiNDRto a version that resolves this vulnerability.Fixed in 7.4.10 - Upgrade
Upgrade
Fortinet FortiNDRto a version that resolves this vulnerability.Fixed in 7.6.3
Event History
Frequently Asked Questions
What is the severity of CVE-2026-25088?
CVE-2026-25088 has a severe impact as it allows authenticated attackers to execute arbitrary SQL commands.
How do I fix CVE-2026-25088?
To fix CVE-2026-25088, upgrade Fortinet FortiNDR to version 7.6.3 or later.
What versions of Fortinet FortiNDR are affected by CVE-2026-25088?
CVE-2026-25088 affects Fortinet FortiNDR versions 7.6.0 through 7.6.2, 7.4.0 through 7.4.9, and all versions of 7.2, 7.1, and 7.0.
Can CVE-2026-25088 be exploited remotely?
No, CVE-2026-25088 requires authenticated access to exploit the SQL injection vulnerability.
What types of attacks can CVE-2026-25088 facilitate?
CVE-2026-25088 can facilitate data leakage, data manipulation, and unauthorized access due to SQL injection.