EUVD-2026-22317

🗓️ 14 Apr 2026 18:30:35Reported by EUVDType

FortiSOAR cross site scripting flaw enables authenticated attacker to trigger stored scripting.

Reporter	Title	Published	Views	Family All 7
CNNVD	Fortinet FortiSOAR PaaS和Fortinet FortiSOAR on-premise 跨站脚本漏洞	14 Apr 202600:00	–	cnnvd
CVE	CVE-2026-22154	14 Apr 202615:38	–	cve
Cvelist	CVE-2026-22154	14 Apr 202615:38	–	cvelist
NVD	CVE-2026-22154	14 Apr 202616:16	–	nvd
Positive Technologies	PT-2026-32664	14 Apr 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-22154	5 Jun 202619:27	–	redhatcve
Vulnrichment	CVE-2026-22154	14 Apr 202615:38	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "a41de152-6b13-381d-be85-c1e6dbe6c19e",
        "vendor": {
          "name": "Fortinet"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "26d09a54-c995-38de-8b2e-9cfc3b23e02d",
        "product": {
          "name": "FortiSOAR on-premise"
        },
        "product_version": "7.5.0 ≤7.5.2"
      },
      {
        "id": "5ba6f11b-8c7d-3a84-a120-32cbb7aa39a2",
        "product": {
          "name": "FortiSOAR on-premise"
        },
        "product_version": "7.4.0 ≤7.4.5"
      },
      {
        "id": "75ebf683-51e9-3aa8-82f7-b12efb3500d1",
        "product": {
          "name": "FortiSOAR PaaS"
        },
        "product_version": "7.3.0 ≤7.3.3"
      },
      {
        "id": "97baa850-dfdd-3ab7-942b-56fa802b0d5c",
        "product": {
          "name": "FortiSOAR PaaS"
        },
        "product_version": "7.5.0 ≤7.5.2"
      },
      {
        "id": "9a87f1dd-77c4-3a83-b6df-586f4466c82e",
        "product": {
          "name": "FortiSOAR PaaS"
        },
        "product_version": "7.4.0 ≤7.4.5"
      },
      {
        "id": "ab659ef3-fefe-39e3-983d-649ced861fe4",
        "product": {
          "name": "FortiSOAR on-premise"
        },
        "product_version": "7.6.0 ≤7.6.3"
      },
      {
        "id": "c573d8f6-f5c8-3212-97c0-a545073c0509",
        "product": {
          "name": "FortiSOAR PaaS"
        },
        "product_version": "7.6.0 ≤7.6.3"
      },
      {
        "id": "ca094eec-936f-318a-baff-89a5ada344f0",
        "product": {
          "name": "FortiSOAR on-premise"
        },
        "product_version": "7.3.0 ≤7.3.3"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-26-117
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-22154

14 Apr 2026 18:30Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.14.6

EPSS0.00221

SSVC