CVE-2026-22574 — Fortinet / FortiSOAR PaaS

Description (CNA)

A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.4, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to retrieve Service account password via server address modification in LDAP configuration.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiSOAR PaaS	affected 7.6.0 through 7.6.4; affected 7.5.0 through 7.5.2; affected 7.4.0 through 7.4.5; affected 7.3.0 through 7.3.3
Fortinet / FortiSOAR on-premise	affected 7.6.0 through 7.6.4; affected 7.5.0 through 7.5.2; affected 7.4.0 through 7.4.5; affected 7.3.0 through 7.3.3

CWE

CWE-257

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-105

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.