CVE-2026-25088

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0 through 7.4.9, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.

CVSS v3 5.4 MEDIUM

5.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://fortiguard.fortinet.com/psirt/FG-IR-26-134	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:fortinet:fortindr::::::::
	cpe:2.3:a:fortinet:fortindr::::::::

History

26 Oct 2026, 18:10

Type	Values Removed	Values Added
Summary		(es) Una neutralización inadecuada de elementos especiales utilizados en un comando SQL (’inyección SQL’) vulnerabilidad en Fortinet FortiNDR 7.6.0 a 7.6.2, FortiNDR 7.4.0 a 7.4.9, FortiNDR 7.2 todas las versiones, FortiNDR 7.1 todas las versiones, FortiNDR 7.0 todas las versiones puede permitir a un atacante autenticado ejecutar código o comandos no autorizados a través de solicitudes HTTP específicamente diseñadas.

Information

Published : 2026-05-12 18:16

Updated : 2026-10-26 18:10

NVD link : CVE-2026-25088

Mitre link : CVE-2026-25088

CVE.ORG link : CVE-2026-25088

JSON object : View

Products Affected

fortinet

fortindr

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2026-25088", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-25088", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-12T18:59:39.373512Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@fortinet.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@fortinet.com", "affectedData": [{"cpes": ["cpe:2.3:a:fortinet:fortindr:7.6.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.6.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.4.9:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.4.8:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.4.7:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.4.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.2.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.2.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.2.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.2.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.2.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.1.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.0.7:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.0.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortindr:7.0.0:*:*:*:*:*:*:*"], "vendor": "Fortinet", "product": "FortiNDR", "versions": [{"status": "affected", "version": "7.6.0", "versionType": "semver", "lessThanOrEqual": "7.6.2"}, {"status": "affected", "version": "7.4.0", "versionType": "semver", "lessThanOrEqual": "7.4.9"}, {"status": "affected", "version": "7.2.0", "versionType": "semver", "lessThanOrEqual": "7.2.5"}, {"status": "affected", "version": "7.1.0", "versionType": "semver", "lessThanOrEqual": "7.1.1"}, {"status": "affected", "version": "7.0.0", "versionType": "semver", "lessThanOrEqual": "7.0.7"}], "defaultStatus": "unaffected"}]}], "published": "2026-05-12T18:16:39.327", "references": [{"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-134", "tags": ["Vendor Advisory"], "source": "psirt@fortinet.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@fortinet.com", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0 through 7.4.9, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests."}, {"lang": "es", "value": "Una neutralizaci\u00f3n inadecuada de elementos especiales utilizados en un comando SQL (\u2019inyecci\u00f3n SQL\u2019) vulnerabilidad en Fortinet FortiNDR 7.6.0 a 7.6.2, FortiNDR 7.4.0 a 7.4.9, FortiNDR 7.2 todas las versiones, FortiNDR 7.1 todas las versiones, FortiNDR 7.0 todas las versiones puede permitir a un atacante autenticado ejecutar c\u00f3digo o comandos no autorizados a trav\u00e9s de solicitudes HTTP espec\u00edficamente dise\u00f1adas."}], "lastModified": "2026-10-26T18:10:00.173", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1FFFEEE-7A3C-43F8-A356-E81AE296BA81", "versionEndExcluding": "7.4.10", "versionStartIncluding": "7.0.0"}, {"criteria": "cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E1103654-9C93-49DC-90FE-5B078D53C94A", "versionEndExcluding": "7.6.3", "versionStartIncluding": "7.6.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@fortinet.com"}