Multiple Arbitrary File Read/Write via SQL Injection

FG-IR-26-178 · Fortinet · October 13, 2026

Summary

No summary from the source. Read the linked document.

What to do

FortiAnalyzer 8.0: Not Applicable FortiAnalyzer 7.6: Upgrade to 7.6.5 or above FortiAnalyzer 7.4: Upgrade to 7.4.8 or above FortiAnalyzer 7.2: Migrate to a fixed release FortiAnalyzer Cloud 7.6: Upgrade to 7.6.5 or above FortiAnalyzer Cloud 7.4: Upgrade to 7.4.8 or above FortiAnalyzer Cloud 7.2: Upgrade to 7.2.12 or above FortiManager 8.0: Not Applicable FortiManager 7.6: Upgrade to 7.6.5 or above FortiManager 7.4: Upgrade to 7.4.7 or above FortiManager 7.2: Migrate to a fixed release FortiManager Cloud 8.0: Not Applicable FortiManager Cloud 7.6: Upgrade to 7.6.5 or above FortiManager Cloud 7.4: Not Applicable FortiManager Cloud 7.2: Not Applicable

Vendor fix or mitigation, quoted from the advisory.

Each CVE in this advisory

CVE	Severity	Known exploited	Exploit likelihood	Weakness
CVE-2025-46773	7.9 high	No	0.3%	Improper Neutralization of Special Elements used in an SQL Command (CWE-89)
CVE-2026-23705	6.5 medium	No	0.3%	Improper Neutralization of Special Elements used in an SQL Command (CWE-89)
CVE-2026-23706	5.9 medium	No	0.3%	Improper Neutralization of Special Elements used in an SQL Command (CWE-89)
CVE-2026-23707	6.5 medium	No	0.3%	Improper Neutralization of Special Elements used in an SQL Command (CWE-89)

Severity from the advisory (CVSS), known exploitation from CISA's catalog, exploit likelihood from EPSS (next 30 days).

Why it's on these mode pages

Maritime: Vendor table: Fortinet (network and remote-access gear used in every mode, all modes) (matched by rule)
Pipeline: Vendor table: Fortinet (network and remote-access gear used in every mode, all modes) (matched by rule)
Freight rail: Vendor table: Fortinet (network and remote-access gear used in every mode, all modes) (matched by rule)
Passenger rail and transit: Vendor table: Fortinet (network and remote-access gear used in every mode, all modes) (matched by rule)
Highway and motor carrier: Vendor table: Fortinet (network and remote-access gear used in every mode, all modes) (matched by rule)
Postal and parcel: Vendor table: Fortinet (network and remote-access gear used in every mode, all modes) (matched by rule)

Change history

October 13, 2026: Initial Publication
October 13, 2026: Initial Publication
November 9, 2026: First collected by Watch

Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com