SQL injection in FortiAnalyzer and FortiManager allows authenticated code execution
The CVSS 8.8 flaw also covers both Cloud products and is triggered by crafted JSON-RPC requests.
Stories per day · 30 days
Relatedfortianalyzer3fortimanager3fortinet3heap-overflow1mcp1model-context-protocol1privilege-escalation1prompt-injection1sql-injection1tool-poisoning1
2 stories, newest first · one card per story
Stories tagged #json-rpc
MCP Explained walks through the 2025-11-25 protocol and attack cases
The guide covers JSON-RPC shapes, deprecated batching, and defenses for tool poisoning, shadowing, and injection.
1