NewsFortinet PSIRT

    Improper neutralization of special elements used in an OS command

    Share
    CVSSv3 Score: 7.2 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiAnalyzer, FortiAnalyzer Cloud, FortiManager and FortiManager Cloud may allow an authenticated privileged attacker to execute unauthorized code or commands via crafted report schedule name. Revised on 2026-11-10 00:00:00

    Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-241

    ID