Skip to content
CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2026-84385

A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fortinet

Description

A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.6, FortiSOAR on-premise 7.5.0 through 7.5.3, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow attacker to escalation of privilege via <insert attack vector here>

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiSOAR on-premise

Default version status: unaffected

  • 7.6.0 to ≤ 7.6.6affected
  • 7.5.0 to ≤ 7.5.3affected
  • 7.4.0 to ≤ 7.4.5affected
  • 7.3.0 to ≤ 7.3.3affected

Fortinet FortiSOAR PaaS

Default version status: unaffected

  • 7.6.0 to ≤ 7.6.6affected
  • 7.5.0 to ≤ 7.5.3affected
  • 7.4.0 to ≤ 7.4.5affected
  • 7.3.0 to ≤ 7.3.3affected

References