CVSSv3 Score: 4.9 An improper neutralization of script-related HTML tags in a web page in FortiManager and FortiAnalyzer may allow an attacker to perform a cross site scripting (XSS) attack via the Identify Provider name field. Revised on 2026-10-13 00:00:00
HTML injection in WebUI
About this summary. This is a short excerpt from the description that Fortinet PSIRT published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://fortiguard.fortinet.com/psirt/FG-IR-20-005
Source attribution: headline and facts are from Fortinet PSIRT (fortiguard.fortinet.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
sshole: OpenSSH Fixes Password Bypass on Alpine Linux
OpenSSH has shipped an emergency release, version 10.6p2, to stop a password bypass that lets a remote attacker log in to accounts that have no password set. The flaw…
Virtualization security: attack layers and misconfiguration impact
Introduction Incidents in virtual environments can begin with a software vulnerability, human error, a configuration weakness, or several of these factors at once. The…
ENISA Warns of Cyberattacks Targeting Refrigeration Systems Across Europe
ENISA warns of cyberattacks on European refrigeration systems, exposing risks to supermarkets, food supplies and industrial controls. The European Union has issued a…
Microsoft Paint RCE CVE-2026-83844 Raises Store Update Questions
Microsoft has disclosed CVE-2026-83844, an out-of-bounds read in the Microsoft Store version of Paint that could allow remote code execution. Microsoft rates the…
NCSC-2026-0470 [1.00] [M/H] Kwetsbaarheid verholpen in Windows Paint van Microsoft
Microsoft heeft een kwetsbaarheid verholpen in Windows Paint. De kwetsbaarheid betreft een out-of-bounds read in Microsoft Windows Paint (CWE-125), waardoor een…
NCSC-2026-0469 [1.00] [M/H] Kwetsbaarheid verholpen in OpenSSH door OpenSSH Project
Het OpenSSH project heeft een kwetsbaarheid verholpen in sshd van OpenSSH versies ouder dan 10.6p2. De kwetsbaarheid treft Linux systemen die gebruikmaken van musl libc…