CVSSv3 Score: 7.9 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiAnalyzer, FortiManager, FortiManager Cloud and FortiAnalyzer Cloud may allow a low privileged user to execute arbitrary commands via crafted requests. Revised on 2026-10-13 00:00:00
Multiple Arbitrary File Read/Write via SQL Injection
About this summary. This is a short excerpt from the description that Fortinet PSIRT published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://fortiguard.fortinet.com/psirt/FG-IR-26-178
Source attribution: headline and facts are from Fortinet PSIRT (fortiguard.fortinet.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Automated Post-Exploitation Attack Chain Exploration Based on a Phase-guided Hybrid Planning-Monte Carlo Tree Search Algorithm
arXiv:2610.32278v1 Announce Type: new Abstract: Advanced attackers in post-exploitation scenarios increasingly craft attack chains that combine benign operations…
New infosec products of the week: October 23, 2026
Here’s a look at the most interesting products from the past week, featuring releases from AppGate, IDENTOS, Sweet Security, and ThreatModeler. Sweet Security adds…
Sweet Security adds one-click protection for vulnerable cloud workloads
Sweet Security has announced the release of Virtual Patching, a new capability that protects running cloud and AI applications from specific vulnerabilities the moment…
Fortinet security advisory (AV26-1037)
Serial Number: AV26-1037 Date: October 13, 2026 As of October 13, 2026, Fortinet is affected by vulnerabilities in the following products: FortiAnalyzer Prior to 7.6.5…
Commvault security advisory (AV26-1033)
Serial number: AV26-1033 Date: October 13, 2026 As of October 13, 2026, Commvault is affected by vulnerabilities in the following products: Commvault Cloud 11.36.0 Prior…
JASPER: Special Session on Joint Reliability And Security Assessment of SPlit Computing for Edge Robustness
arXiv:2610.04396v1 Announce Type: new Abstract: Split Computing (SC) enables efficient deployment of Deep Neural Networks (DNNs) by partitioning inference between edge…