← CVE Intelligence

CVE-2026-22573

Fortinet / FortiSOAR on-premise PUBLISHED

Description (CNA)

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5 all versions, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5 all versions, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to perform path traversal attack via File Content Extraction actions.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiSOAR on-premiseaffected 7.6.0 through 7.6.3; affected 7.5.0 through 7.5.3; affected 7.4.0 through 7.4.5; affected 7.3.0 through 7.3.3
Fortinet / FortiSOAR PaaSaffected 7.6.0 through 7.6.3; affected 7.5.0 through 7.5.3; affected 7.4.0 through 7.4.5; affected 7.3.0 through 7.3.3

CWE

CWE-22

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.