NewsFortinet PSIRT
Improper control of generation of code
Teaser from the source
CVSSv3 Score: 7.2 A Code Injection vulnerability [CWE-94] in FortiManager, FortiManager Cloud, FortiAnalyzer and FortiAnalyzer Cloud may allow an authenticated administrator to execute unauthorized code or commands via specially crafted requests. Revised on 2026-11-10 00:00:00
This is the RSS-feed teaser. Read the full article at the original source.
Read at Fortinet PSIRTMore on generation
Other advisories
- HighCVE-2026-116328PostgreSQL generation memory context integer wraparound executes arbitrary code
- Not ratedosv:CVE-2026-128074Nuxt payload URL generation has quadratic cost for repeated slashes in the request path
- MediumCVE-2026-128074Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.4, _payload.json URL generation and the experimental early-404 path use a t…
- MediumCVE-2026-63170Omnispace Agora Project through 26.10.0 contains a predictable token generation vulnerability that allows unauthenticated attackers to forge the shared-calen…
- HighCVE-2026-63151Omnispace Agora Project through 26.10.0 contains a predictable token generation vulnerability that allows unauthenticated attackers to access private calenda…
- MediumCVE-2026-126817A flaw in the automatic client-side encryption schema generation of the Mongoid ODM may cause values that an application declared for encryption to be writte…
- HighCVE-2026-119517Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Catna – Woo Name Your Price and Offers catna…
- HighCVE-2026-124410Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpLingua Translation Service Translate and boost SEO &#…
Other news entries
- eMudhra revokes 8 more CA certificates after private key mishapNewsBleepingComputer
- Improper control of generation of code in GUINewsFortinet PSIRT
- Critical Langflow flaws enable authentication bypass and RCENewsCSO Online
- Rethinking Cybersecurity Awareness in the AI EraNewsDark Reading
- 10 Software Security Practices Built for the Next 250 YearsNewsDark Reading
- Watch Now: Zero Trust Strategies Summit – All Sessions Available on DemandEventSecurityWeek
- Anthropic warns small AI models could self-replicate through IoT devicesNewsArs Technica — Security
- Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution VulnerabilitiesNewsCisco PSIRT
Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-230
ID