Recently modified vulnerabilities for "fortinet fortimanager cloud" 7.6.3

Where

AND

Sort:

Fortinet FortiAnalyzerImproper limitation of a pathname to a restricted directory

Risk 66

Severity

7.2

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

An Improper Limitation of a Pathname to a Restricted Directory (CWE-22) vulnerability in FortiManager, FortiAnalyzer, FortiManager Cloud and FortiAnalyzer Cloud may allow an authenticated attacker with admin privileges to execute unauthorized code or commands via crafted requests.

First published (updated )

Advisory

FG-IR-26-237

Fortinet FortiAnalyzerImproper limitation of a pathname to a restricted directory

Risk 66

Severity

7.2

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

First published (updated )

CVE-2026-126222

Fortinet FortiAnalyzerPrivilege escalation using undocumented CLI command

Risk 66

Severity

7.2

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:W/RC:C

A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.10, FortiAnalyzer 7.0.0 through 7.0.14, FortiAnalyzer 6.4 all versions, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.10, FortiAnalyzer Cloud 7.0.1 through 7.0.14, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.6.0 through 7.6.3, FortiManager 7.4.0 through 7.4.7, FortiManager 7.2.0 through 7.2.10, FortiManager 7.0.0 through 7.0.14, FortiManager 6.4 all versions, FortiManager Cloud 7.6.2 through 7.6.3, FortiManager Cloud 7.4.1 through 7.4.7, FortiManager Cloud 7.2.1 through 7.2.10, FortiManager Cloud 7.0.1 through 7.0.14, FortiManager Cloud 6.4 all versions may allow a remote authenticated read-only admin with CLI access to escalate their privilege via use of a hidden command.

1 / 2

Source: MITRE

Remedy

Upgrade to FortiAnalyzer version 7.6.4 or above Upgrade to FortiAnalyzer version 7.4.8 or above Upgrade to FortiAnalyzer version 7.2.11 or above Upgrade to FortiAnalyzer version 7.0.15 or above Upgrade to FortiAnalyzer Cloud version 7.6.4 or above Upgrade to FortiAnalyzer Cloud version 7.4.8 or above Upgrade to FortiAnalyzer Cloud version 7.2.11 or above Upgrade to FortiAnalyzer Cloud version 7.0.15 or above Upgrade to FortiManager version 7.6.4 or above Upgrade to FortiManager version 7.4.8 or above Upgrade to FortiManager version 7.2.11 or above Upgrade to FortiManager version 7.0.15 or above Upgrade to FortiManager Cloud version 7.6.4 or above Upgrade to FortiManager Cloud version 7.4.8 or above Upgrade to FortiManager Cloud version 7.2.11 or above Upgrade to FortiManager Cloud version 7.0.15 or above

First published (updated )

CVE-2025-48418

Fortinet FortiAnalyzerPrivilege escalation using undocumented CLI command

Risk 59

Severity

6.4

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:W/RC:C

An Inclusion of Undocumented Features [CWE-1242] in FortiManager and FortiAnalyzer CLI may allow a remote authenticated read-only admin with CLI access to escalate their privilege via use of a hidden command.

First published (updated )

Advisory

FG-IR-26-081

Trending

Fortinet FortiAnalyzerImproper limitation of a pathname to a restricted directory

Fortinet FortiAnalyzerImproper limitation of a pathname to a restricted directory

Fortinet FortiAnalyzerPrivilege escalation using undocumented CLI command

Remedy

Fortinet FortiAnalyzerPrivilege escalation using undocumented CLI command

Company

Resources

Contact