CVE-2026-22573

The CVE-2026-22573 issue affects Fortinet FortiSOAR PaaS and FortiSOAR on-premise installations (versions 7.6.0–7.6.3, 7.5 all, 7.4 all, 7.3 all) with an improper limitation of a pathname to a restricted directory (path traversal). An authenticated remote attacker may exploit File Content Extract...

CVE-2026-23708

A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5.0 through 7.5.2 may allow an unauthenticated attacker to bypass authentication via replaying captured 2FA...