FortiSOAR on-premise vulnerabilities

3 known vulnerabilities in FortiSOAR on-premise from Fortinet. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  FortiSOAR on-premise: Missing Authorization

  CVE-2026-23708Apr 14, 2026Fortinet

  A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5.0 through 7.5.2 may allow an unauthenticated attacker to bypass authe

• 7.5 High severity

  FortiSOAR PaaS: Cleartext Transmission of Sensitive Information

  CVE-2026-22155Apr 14, 2026Fortinet

  A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, Fort

• 7.0 High severity

  FortiSOAR on-premise: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-48891Oct 14, 2025Fortinet

  An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiSOAR 7.6.0 through 7.6.1, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all versions may allow an attacker who has already obtained a non-