imPC@ndo IT

Tracker / CVE-2026-22573

CVE-2026-22573

Medium 6.5

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5 all versions, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5 all versions, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to perform path traversal attack via File Content Extraction actions.

Affected products and versions

fortinet fortisoar · 7.3.0 → 7.3.3
fortinet fortisoar · 7.4.0 → 7.4.5
fortinet fortisoar · 7.5.0 → 7.5.3
fortinet fortisoar · 7.6.0 → 7.6.3

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References