Advisories · Technology

Fortinet FortiSOAR PaaS.

Every CVE that names Fortinet FortiSOAR PaaS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-84385 CVE record

CVSS 4.9 Medium

Improper access control in Fortinet FortiSOAR on-premise and others
- Fortinet FortiSOAR on-premise
- Fortinet FortiSOAR PaaS
- Broken access control
Not analysed yet 8 Sept 2026
CVE-2026-22573 CVE record

CVSS 6.2 Medium

Path traversal in Fortinet FortiSOAR on-premise and others
- Fortinet FortiSOAR on-premise
- Fortinet FortiSOAR PaaS
- Path traversal
Not analysed yet 14 Apr 2026
CVE-2026-23708 CVE record

CVSS 6.7 Medium

Improper authentication in Fortinet FortiSOAR PaaS and others
- Fortinet FortiSOAR PaaS
- Fortinet FortiSOAR on-premise
- Authentication bypass
Not analysed yet 14 Apr 2026
CVE-2025-59809 CVE record

CVSS 4.1 Medium

Server-side request forgery in Fortinet FortiSOAR on-premise and others
- Fortinet FortiSOAR on-premise
- Fortinet FortiSOAR PaaS
- Server-side request forgery (SSRF)
Not analysed yet 14 Apr 2026
CVE-2026-22155 CVE record

CVSS 6.2 Medium

Cleartext transmission of sensitive information in Fortinet FortiSOAR PaaS and others
- Fortinet FortiSOAR PaaS
- Fortinet FortiSOAR on-premise
- Weak cryptography or TLS
Not analysed yet 14 Apr 2026
CVE-2026-21742 CVE record

CVSS 5.4 Medium

Cleartext transmission of sensitive information in Fortinet FortiSOAR on-premise and others
- Fortinet FortiSOAR on-premise
- Fortinet FortiSOAR PaaS
- Weak cryptography or TLS
Not analysed yet 14 Apr 2026
CVE-2026-22574 CVE record

CVSS 4.1 Medium

Fortinet FortiSOAR PaaS: A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS…
- Fortinet FortiSOAR PaaS
- Fortinet FortiSOAR on-premise
- CWE-257
Not analysed yet 14 Apr 2026
CVE-2026-22154 CVE record

CVSS 4.4 Medium

Cross-site scripting in Fortinet FortiSOAR PaaS and others
- Fortinet FortiSOAR PaaS
- Fortinet FortiSOAR on-premise
- Cross-site scripting (XSS)
Not analysed yet 14 Apr 2026
CVE-2026-22576 CVE record

CVSS 4.1 Medium

Fortinet FortiSOAR PaaS: A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS…
- Fortinet FortiSOAR PaaS
- Fortinet FortiSOAR on-premise
- CWE-257
Not analysed yet 14 Apr 2026
CVE-2025-59810 CVE record

CVSS 6.2 Medium

Improper access control in Fortinet FortiSOAR on-premise and others
- Fortinet FortiSOAR on-premise
- Fortinet FortiSOAR PaaS
- Broken access control
Not analysed yet 9 Dec 2025
CVE-2025-59808 CVE record

CVSS 6.5 Medium

Fortinet FortiSOAR on-premise: An unverified password change vulnerability [CWE-620] vulnerability in Fortinet FortiSOAR…
- Fortinet FortiSOAR on-premise
- Fortinet FortiSOAR PaaS
- CWE-620
Not analysed yet 9 Dec 2025