NewsFortinet PSIRT
Code-Injektionslücke in FortiManager und FortiAnalyzer
Teaser aus der Quelle
Eine Code-Injektionslücke [CWE-94] in FortiManager, FortiManager Cloud, FortiAnalyzer und FortiAnalyzer Cloud ermöglicht es einem authentifizierten Administrator, unautorisierten Code oder Befehle über speziell gestaltete Anfragen auszuführen. Der CVSSv3-Score beträgt 7.2. Es wird empfohlen, die neuesten Sicherheitsupdates zu installieren.
Dies ist ein Anriss aus dem RSS-Feed. Den vollständigen Artikel lesen Sie beim Original.
Artikel bei Fortinet PSIRT lesenMehr zu generation
Weitere Advisories
- HochCVE-2026-116328PostgreSQL generation memory context integer wraparound executes arbitrary code
- Ohne Bewertungosv:CVE-2026-128074Nuxt payload URL generation has quadratic cost for repeated slashes in the request path
- MittelCVE-2026-128074Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.4, _payload.json URL generation and the experimental early-404 path use a t…
- MittelCVE-2026-63170Omnispace Agora Project through 26.10.0 contains a predictable token generation vulnerability that allows unauthenticated attackers to forge the shared-calen…
- HochCVE-2026-63151Omnispace Agora Project through 26.10.0 contains a predictable token generation vulnerability that allows unauthenticated attackers to access private calenda…
- MittelCVE-2026-126817A flaw in the automatic client-side encryption schema generation of the Mongoid ODM may cause values that an application declared for encryption to be writte…
- HochCVE-2026-119517Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Catna – Woo Name Your Price and Offers catna…
- HochCVE-2026-124410Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpLingua Translation Service Translate and boost SEO &#…
Weitere News-Einträge
- eMudhra revokes 8 more CA certificates after private key mishapNewsBleepingComputer
- Improper control of generation of code in GUINewsFortinet PSIRT
- Critical Langflow flaws enable authentication bypass and RCENewsCSO Online
- Rethinking Cybersecurity Awareness in the AI EraNewsDark Reading
- 10 Software Security Practices Built for the Next 250 YearsNewsDark Reading
- Watch Now: Zero Trust Strategies Summit – All Sessions Available on DemandTerminSecurityWeek
- Anthropic warns small AI models could self-replicate through IoT devicesNewsArs Technica — Security
- Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution VulnerabilitiesNewsCisco PSIRT
Quelle: https://fortiguard.fortinet.com/psirt/FG-IR-26-230
ID