CVE-2026-22573

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-22573", "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "state": "PUBLISHED", "assignerShortName": "fortinet", "dateReserved": "2026-01-07T18:30:44.883Z", "datePublished": "2026-04-14T15:38:22.081Z", "dateUpdated": "2026-11-06T15:42:06.306Z"}, "containers": {"cna": {"affected": [{"vendor": "Fortinet", "product": "FortiSOAR on-premise", "cpes": ["cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.0:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"versionType": "semver", "version": "7.6.0", "lessThanOrEqual": "7.6.3", "status": "affected"}, {"versionType": "semver", "version": "7.5.0", "lessThanOrEqual": "7.5.3", "status": "affected"}, {"versionType": "semver", "version": "7.4.0", "lessThanOrEqual": "7.4.5", "status": "affected"}, {"versionType": "semver", "version": "7.3.0", "lessThanOrEqual": "7.3.3", "status": "affected"}]}, {"vendor": "Fortinet", "product": "FortiSOAR PaaS", "cpes": ["cpe:2.3:a:fortinet:fortisoarpaas:7.6.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.6.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.6.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.5.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.5.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.0:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"versionType": "semver", "version": "7.6.0", "lessThanOrEqual": "7.6.3", "status": "affected"}, {"versionType": "semver", "version": "7.5.0", "lessThanOrEqual": "7.5.3", "status": "affected"}, {"versionType": "semver", "version": "7.4.0", "lessThanOrEqual": "7.4.5", "status": "affected"}, {"versionType": "semver", "version": "7.3.0", "lessThanOrEqual": "7.3.3", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5.0 through 7.5.3, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to perform path traversal attack via File Content Extraction actions."}], "providerMetadata": {"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "shortName": "fortinet", "dateUpdated": "2026-11-06T15:42:06.306Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-22", "description": "Information disclosure", "type": "CWE"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C"}}], "solutions": [{"lang": "en", "value": "Upgrade to FortiSOAR on-premise version 7.6.4 or above\nUpgrade to FortiSOAR PaaS version 7.6.4 or above"}], "references": [{"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-116", "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-116"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-22573", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-14T16:24:34.309578Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-14T16:46:14.901Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-22573", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-14T16:24:34.309578Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-14T16:37:04.668Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.2, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"cpes": ["cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.0:*:*:*:*:*:*:*"], "vendor": "Fortinet", "product": "FortiSOAR on-premise", "versions": [{"status": "affected", "version": "7.6.0", "versionType": "semver", "lessThanOrEqual": "7.6.3"}, {"status": "affected", "version": "7.5.0", "versionType": "semver", "lessThanOrEqual": "7.5.3"}, {"status": "affected", "version": "7.4.0", "versionType": "semver", "lessThanOrEqual": "7.4.5"}, {"status": "affected", "version": "7.3.0", "versionType": "semver", "lessThanOrEqual": "7.3.3"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:fortinet:fortisoarpaas:7.6.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.6.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.6.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.5.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.5.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.0:*:*:*:*:*:*:*"], "vendor": "Fortinet", "product": "FortiSOAR PaaS", "versions": [{"status": "affected", "version": "7.6.0", "versionType": "semver", "lessThanOrEqual": "7.6.3"}, {"status": "affected", "version": "7.5.0", "versionType": "semver", "lessThanOrEqual": "7.5.3"}, {"status": "affected", "version": "7.4.0", "versionType": "semver", "lessThanOrEqual": "7.4.5"}, {"status": "affected", "version": "7.3.0", "versionType": "semver", "lessThanOrEqual": "7.3.3"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Upgrade to FortiSOAR on-premise version 7.6.4 or above\nUpgrade to FortiSOAR PaaS version 7.6.4 or above"}], "references": [{"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-116", "name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-116"}], "descriptions": [{"lang": "en", "value": "An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5.0 through 7.5.3, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to perform path traversal attack via File Content Extraction actions."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "Information disclosure"}]}], "providerMetadata": {"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "shortName": "fortinet", "dateUpdated": "2026-11-06T15:42:06.306Z"}}}, "cveMetadata": {"cveId": "CVE-2026-22573", "state": "PUBLISHED", "dateUpdated": "2026-11-06T15:42:06.306Z", "dateReserved": "2026-01-07T18:30:44.883Z", "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "datePublished": "2026-04-14T15:38:22.081Z", "assignerShortName": "fortinet"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.0:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "FortiSOAR on-premise", "vendor": "Fortinet", "versions": [{"lessThanOrEqual": "7.6.3", "status": "affected", "version": "7.6.0", "versionType": "semver"}, {"lessThanOrEqual": "7.5.3", "status": "affected", "version": "7.5.0", "versionType": "semver"}, {"lessThanOrEqual": "7.4.5", "status": "affected", "version": "7.4.0", "versionType": "semver"}, {"lessThanOrEqual": "7.3.3", "status": "affected", "version": "7.3.0", "versionType": "semver"}]}, {"cpes": ["cpe:2.3:a:fortinet:fortisoarpaas:7.6.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.6.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.6.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.5.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.5.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.0:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "FortiSOAR PaaS", "vendor": "Fortinet", "versions": [{"lessThanOrEqual": "7.6.3", "status": "affected", "version": "7.6.0", "versionType": "semver"}, {"lessThanOrEqual": "7.5.3", "status": "affected", "version": "7.5.0", "versionType": "semver"}, {"lessThanOrEqual": "7.4.5", "status": "affected", "version": "7.4.0", "versionType": "semver"}, {"lessThanOrEqual": "7.3.3", "status": "affected", "version": "7.3.0", "versionType": "semver"}]}], "source": "psirt@fortinet.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*", "matchCriteriaId": "030CE7E8-05B5-4AE0-AD59-5D07150DEF46", "versionEndIncluding": "7.3.3", "versionStartIncluding": "7.3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*", "matchCriteriaId": "46AD20C7-44D4-4DDE-B74A-BEB8B3890277", "versionEndIncluding": "7.4.5", "versionStartIncluding": "7.4.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*", "matchCriteriaId": "86B32392-F2E0-49FE-988A-02CC6D257DBD", "versionEndIncluding": "7.5.3", "versionStartIncluding": "7.5.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*", "matchCriteriaId": "DEB8A1CE-2EB8-43B7-9E9A-0106BF54631E", "versionEndIncluding": "7.6.3", "versionStartIncluding": "7.6.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5.0 through 7.5.3, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to perform path traversal attack via File Content Extraction actions."}, {"lang": "es", "value": "Una vulnerabilidad de limitaci\u00f3n inadecuada de un nombre de ruta a un directorio restringido (\u2019salto de ruta\u2019) en Fortinet FortiSOAR PaaS 7.6.0 hasta 7.6.3, FortiSOAR PaaS 7.5 todas las versiones, FortiSOAR PaaS 7.4 todas las versiones, FortiSOAR PaaS 7.3 todas las versiones, FortiSOAR on-premise 7.6.0 hasta 7.6.3, FortiSOAR on-premise 7.5 todas las versiones, FortiSOAR on-premise 7.4 todas las versiones, FortiSOAR on-premise 7.3 todas las versiones puede permitir a un atacante remoto autenticado realizar un ataque de salto de ruta a trav\u00e9s de acciones de Extracci\u00f3n de Contenido de Archivos."}], "id": "CVE-2026-22573", "lastModified": "2026-11-06T16:17:57.357", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "psirt@fortinet.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-22573", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-14T16:24:34.309578Z", "version": "2.0.3"}}]}, "published": "2026-04-14T16:16:36.550", "references": [{"source": "psirt@fortinet.com", "tags": ["Vendor Advisory"], "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-116"}], "sourceIdentifier": "psirt@fortinet.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "psirt@fortinet.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.6.0,7.6.3]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.5.0,7.5.3]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.4.0,7.4.5]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.3.0,7.3.3]"}}], "enrichment": {"confidence": 98.0, "confidence_source": "matching", "scores": [{"score": 98.0, "source": "matching"}]}, "original": {"product": "FortiSOAR on-premise", "source": "cna", "vendor": "Fortinet"}, "product": "fortisoaron-premise", "vendor": "fortinet"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.6.0,7.6.3]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.5.0,7.5.3]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.4.0,7.4.5]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.3.0,7.3.3]"}}], "enrichment": {"confidence": 98.0, "confidence_source": "matching", "scores": [{"score": 98.0, "source": "matching"}]}, "original": {"product": "FortiSOAR PaaS", "source": "cna", "vendor": "Fortinet"}, "product": "fortisoarpaas", "vendor": "fortinet"}], "created": "2026-04-15T14:41:09.657300+00:00", "updated": "2026-11-06T19:30:10.594897+00:00", "vendors": ["fortinet", "fortinet$PRODUCT$fortisoaron-premise", "fortinet$PRODUCT$fortisoarpaas"]}