← Home
User controlled SQL commands
Source: fortinet / FG-IR-26-134
— original advisory
Published: 2026-05-12
· Last updated: 2026-05-12
· Vendor severity: Not rated by vendor
CVEs
| CVE | CVSS | CWE | Exploitation |
| CVE-2026-25088 |
5.1 |
CWE-89: SQL Injection |
Not observed in the wild |
Affected Products
| Product | Affected versions | Fixed version |
| FortiNDR |
FortiNDR 7.6 |
Not specified by vendor |
| FortiNDR |
FortiNDR 7.4 |
Not specified by vendor |
| FortiNDR |
FortiNDR 7.2 |
Not specified by vendor |
| FortiNDR |
FortiNDR 7.1 |
Not specified by vendor |
| FortiNDR |
FortiNDR 7.0 |
Not specified by vendor |
| FortiNDR |
7.6.2 |
Not specified by vendor |
| FortiNDR |
7.6.1 |
Not specified by vendor |
| FortiNDR |
7.6.0 |
Not specified by vendor |
| FortiNDR |
7.4.9 |
Not specified by vendor |
| FortiNDR |
7.4.8 |
Not specified by vendor |
| FortiNDR |
7.4.7 |
Not specified by vendor |
| FortiNDR |
7.4.6 |
Not specified by vendor |
| FortiNDR |
7.4.5 |
Not specified by vendor |
| FortiNDR |
7.4.4 |
Not specified by vendor |
| FortiNDR |
7.4.3 |
Not specified by vendor |
| FortiNDR |
7.4.2 |
Not specified by vendor |
| FortiNDR |
7.4.1 |
Not specified by vendor |
| FortiNDR |
7.4.0 |
Not specified by vendor |
| FortiNDR |
7.2.5 |
Not specified by vendor |
| FortiNDR |
7.2.4 |
Not specified by vendor |
| FortiNDR |
7.2.3 |
Not specified by vendor |
| FortiNDR |
7.2.2 |
Not specified by vendor |
| FortiNDR |
7.2.1 |
Not specified by vendor |
| FortiNDR |
7.2.0 |
Not specified by vendor |
| FortiNDR |
7.1.1 |
Not specified by vendor |
| FortiNDR |
7.1.0 |
Not specified by vendor |
| FortiNDR |
7.0.7 |
Not specified by vendor |
| FortiNDR |
7.0.6 |
Not specified by vendor |
| FortiNDR |
7.0.5 |
Not specified by vendor |
| FortiNDR |
7.0.4 |
Not specified by vendor |
| FortiNDR |
7.0.3 |
Not specified by vendor |
| FortiNDR |
7.0.2 |
Not specified by vendor |
| FortiNDR |
7.0.1 |
Not specified by vendor |
| FortiNDR |
7.0.0 |
Not specified by vendor |