Fortinet FortiSOAR PaaS
11 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-84385 | 7.6.0 – 7.6.6 ; 7.5.0 – 7.5.3 ; 7.4.0 – 7.4.5 ; … | A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7 | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-22573 | 7.6.0 – 7.6.3 ; 7.5.0 – 7.5.3 ; 7.4.0 – 7.4.5 ; … | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6 | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-23708 | 7.6.0 – 7.6.3 ; 7.5.0 – 7.5.2 | A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR on-pre | HIGH 8.1 | 0.3 % | ||
| CVE-2025-59809 | 7.6.4 ; 7.6.0 – 7.6.2 ; 7.5.0 – 7.5.2 ; … | A server-side request forgery (ssrf) vulnerability [CWE-918] vulnerability in Fortinet FortiSOAR PaaS 7.6.4, FortiSOAR PaaS 7.6.0 through 7. | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-22155 | 7.6.0 – 7.6.3 ; 7.5.0 – 7.5.2 ; 7.4.0 – 7.4.5 ; … | A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through | HIGH 7.5 | 0.2 % | ||
| CVE-2026-21742 | 7.6.0 – 7.6.2 ; 7.5.0 – 7.5.1 ; 7.4.0 – 7.4.5 ; … | A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through | MEDIUM 6.5 | 0.1 % | ||
| CVE-2026-22574 | 7.6.0 – 7.6.4 ; 7.5.0 – 7.5.2 ; 7.4.0 – 7.4.5 ; … | A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2 | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-22154 | 7.6.0 – 7.6.3 ; 7.5.0 – 7.5.2 ; 7.4.0 – 7.4.5 ; … | An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 throu | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-22576 | 7.6.0 – 7.6.4 ; 7.5.0 – 7.5.2 ; 7.4.0 – 7.4.5 ; … | A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2 | MEDIUM 6.5 | 0.3 % | ||
| CVE-2025-59810 | 7.6.0 – 7.6.2 ; 7.5.0 – 7.5.1 ; 7.4.0 – 7.4.5 ; … | An improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.1, FortiSOAR PaaS | MEDIUM 6.5 | 0.3 % | ||
| CVE-2025-59808 | 7.6.0 – 7.6.2 ; 7.5.0 – 7.5.1 ; 7.4.0 – 7.4.5 ; … | An unverified password change vulnerability [CWE-620] vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 thr | MEDIUM 6.8 | 0.2 % |