FortiSOAR PaaS vulnerabilities

2 known vulnerabilities in FortiSOAR PaaS from Fortinet. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  FortiSOAR on-premise: Missing Authorization

  CVE-2026-23708Apr 14, 2026Fortinet

  A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5.0 through 7.5.2 may allow an unauthenticated attacker to bypass authe

• 7.5 High severity

  FortiSOAR PaaS: Cleartext Transmission of Sensitive Information

  CVE-2026-22155Apr 14, 2026Fortinet

  A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, Fort