FortiManager and FortiAnalyzer path traversal lets admins write files
A crafted archive is the stated vector, CVSS is 7.2, and both Cloud products are in scope.
44
Product
FortiManager Cloud
- Mentions · 7d23
- Mentions · 30d26
- All mentions27
- First seenAug 12, 2026
- Last mentioned21h ago
Timeline
27 articles · newest firstFortiManager and FortiAnalyzer API format-string flaw scores CVSS 7.2
An authenticated attacker can run unauthorized commands through a crafted HTTP request to the named cloud and on-prem APIs.
48
Admin path traversal in FortiManager and FortiAnalyzer can run commands
FG-IR-26-237 is a CWE-22 flaw scored CVSS 7.2 and requires existing admin privileges.
50
FortiAnalyzer and FortiManager HA plugin command injection scores 7.2
An authenticated attacker can run unauthorized commands by sending a crafted HTTP request to the system-ha plugin.
48
FortiManager and FortiAnalyzer heap overflow lets admins run code
The CVSS 7.2 flaw is triggered by crafted JSON-RPC requests and can also cause a denial of service.
36
FortiManager and FortiAnalyzer GUI flaws allow authenticated code execution
FG-IR-26-227 combines CWE-94 code injection and a CWE-120 buffer overflow, scored CVSS 7.2.
54
FortiManager and FortiAnalyzer have authenticated OS command injection
Fortinet scores FG-IR-26-224 at 7.2 and names cloud editions, but no versions or CVE.
42
Fortinet fortilogd spoofing flaw can disrupt high-availability state
CVSSv3 is 8.2 across Analyzer, Manager, and FortiSASE-Sovereign; no versions or exploitation are stated.
48
Restricted FortiManager users can run commands via template injection
Scored CVSS 7.2, it also hits FortiManager Cloud, FortiAnalyzer and FortiAnalyzer Cloud, with no exploitation stated.
50
SQL injection in FortiAnalyzer and FortiManager allows authenticated code execution
The CVSS 8.8 flaw also covers both Cloud products and is triggered by crafted JSON-RPC requests.
54
FortiManager template injection can grant super admin on FortiGates
Fortinet rates the command-injection path CVSS 8.4; the notice does not name versions, fixes or active attacks.
58
FortiManager dmserver flaw lets admins access other VDOMs
The CVSS 9.1 CWE-639 issue also covers FortiAnalyzer and both cloud products; no fix or exploitation is stated.
55
FortiManager and FortiAnalyzer flaws let admins escalate privileges
An authenticated administrator can bypass authorization or impersonate internal services through crafted GUI requests.
42
Authenticated FortiManager and FortiAnalyzer flaws allow file and command access
CVSS 7.2 issues also cover both Cloud editions; the November 10 revision states no versions or exploitation.
46
Fortinet RADIUS certificate flaw lets MITM impersonate the server
A rogue RADIUS server can be impersonated against FortiSASE Sovereign, FortiManager and FortiAnalyzer products, scored CVSS 7.5.
40
FortiManager and FortiAnalyzer code injection lets admins run commands
FG-IR-26-230 scores CVSS 7.2 and also covers both products’ cloud editions; no fix is stated.
52
Fortinet GUI OS command injection hits FortiManager and FortiAnalyzer
FG-IR-26-251 also names FortiSASE-Sovereign and is scored 7.2 for authenticated HTTP requests.
42
FortiManager GUI flaw lets authenticated users run out-of-scope commands
Fortinet rates the CWE-639 GUI flaw CVSS 8.7; the advisory gives no versions, fix, or exploitation status.
52
FortiAnalyzer and FortiManager allow privilege elevation via JSON-RPC
An already privileged authenticated attacker can raise privileges with a crafted JSON-RPC request.
38
FortiManager argument injection lets privileged admins run commands
The CWE-88 issue is scored 7.2 and also covers both Cloud products; exploitation is not stated.
45
FortiManager and FortiAnalyzer SQL injection scores CVSS 7.1
An authenticated attacker can run unauthorized SQL commands through specially crafted requests.
36
FortiAnalyzer and FortiManager OS command injection scores CVSS 7.2
An authenticated privileged attacker can run unauthorized code via a crafted report schedule name.
38
Second FortiManager heap overflow allows admin code execution
FG-IR-26-223, scored CVSS 7.2, lets an authenticated admin run code through a crafted request.
34
Fortinet schedules critical fixes for FortiOS, FortiManager, and FortiAnalyzer
Minimum fixed builds are set for October 22, while PSIRT advisories and CVE details are due November 10.
70
Fortinet security advisory (AV26-1037)
Canada's Cyber Centre urges patches for file-write and SQL-injection flaws across several Fortinet products.
52
Multiple Arbitrary File Read/Write via SQL Injection
Fortinet says SQL injection in FortiAnalyzer and FortiManager lets low-privileged users run arbitrary commands.
58
FGFM Authentication Weakening via CLI Configuration
FortiManager FGFM flaw (CVSS 7.3) lets an attacker with a valid certificate impersonate any managed FortiGate under a specific CLI option.
40
Appears with
- FortiManagerproduct · 27
- Fortinetvendor · 27
- Fortianalyzerproduct · 24
- FortiAnalyzer Cloudproduct · 23
- FortiSase-Sovereignproduct · 3
- FortiMailproduct · 2
- FortiGateproduct · 2
- FortiAnalyzer-BigDataproduct · 2
- Canadian Centre for Cyber Securityorganization · 1
- FortiSandbox PaaSproduct · 1
- Fortinetorganization · 1
- FortiSIEMproduct · 1
- OpenAIorganization · 1
- FortiSASEproduct · 1
- Anthropicorganization · 1
- FortiSASE Sovereignproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.