CVE-2026-22576

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-22576", "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "state": "PUBLISHED", "assignerShortName": "fortinet", "dateReserved": "2026-01-07T18:30:44.883Z", "datePublished": "2026-04-14T15:38:05.576Z", "dateUpdated": "2026-11-06T15:42:06.677Z"}, "containers": {"cna": {"affected": [{"vendor": "Fortinet", "product": "FortiSOAR on-premise", "cpes": ["cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.0:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"versionType": "semver", "version": "7.6.0", "lessThanOrEqual": "7.6.4", "status": "affected"}, {"versionType": "semver", "version": "7.5.0", "lessThanOrEqual": "7.5.2", "status": "affected"}, {"versionType": "semver", "version": "7.4.0", "lessThanOrEqual": "7.4.5", "status": "affected"}, {"versionType": "semver", "version": "7.3.0", "lessThanOrEqual": "7.3.3", "status": "affected"}]}, {"vendor": "Fortinet", "product": "FortiSOAR PaaS", "cpes": ["cpe:2.3:a:fortinet:fortisoarpaas:7.6.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.6.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.6.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.6.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.5.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.0:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"versionType": "semver", "version": "7.6.0", "lessThanOrEqual": "7.6.4", "status": "affected"}, {"versionType": "semver", "version": "7.5.0", "lessThanOrEqual": "7.5.2", "status": "affected"}, {"versionType": "semver", "version": "7.4.0", "lessThanOrEqual": "7.4.5", "status": "affected"}, {"versionType": "semver", "version": "7.3.0", "lessThanOrEqual": "7.3.3", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.4, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to retrieve passwords for multiple installed connectors via server address modification in connector configuration."}], "providerMetadata": {"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "shortName": "fortinet", "dateUpdated": "2026-11-06T15:42:06.677Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-257", "description": "Information disclosure", "type": "CWE"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C"}}], "solutions": [{"lang": "en", "value": "Upgrade to FortiSOAR on-premise version 7.6.5 or above\nUpgrade to FortiSOAR on-premise version 7.5.3 or above\nUpgrade to FortiSOAR PaaS version 7.6.5 or above\nUpgrade to FortiSOAR PaaS version 7.5.3 or above"}], "references": [{"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-104", "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-104"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-22576", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-14T16:29:52.411885Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-14T16:46:17.327Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-22576", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-14T16:29:52.411885Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-14T16:37:34.812Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}], "affected": [{"cpes": ["cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.0:*:*:*:*:*:*:*"], "vendor": "Fortinet", "product": "FortiSOAR on-premise", "versions": [{"status": "affected", "version": "7.6.0", "versionType": "semver", "lessThanOrEqual": "7.6.4"}, {"status": "affected", "version": "7.5.0", "versionType": "semver", "lessThanOrEqual": "7.5.2"}, {"status": "affected", "version": "7.4.0", "versionType": "semver", "lessThanOrEqual": "7.4.5"}, {"status": "affected", "version": "7.3.0", "versionType": "semver", "lessThanOrEqual": "7.3.3"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:fortinet:fortisoarpaas:7.6.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.6.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.6.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.6.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.5.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.0:*:*:*:*:*:*:*"], "vendor": "Fortinet", "product": "FortiSOAR PaaS", "versions": [{"status": "affected", "version": "7.6.0", "versionType": "semver", "lessThanOrEqual": "7.6.4"}, {"status": "affected", "version": "7.5.0", "versionType": "semver", "lessThanOrEqual": "7.5.2"}, {"status": "affected", "version": "7.4.0", "versionType": "semver", "lessThanOrEqual": "7.4.5"}, {"status": "affected", "version": "7.3.0", "versionType": "semver", "lessThanOrEqual": "7.3.3"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Upgrade to FortiSOAR on-premise version 7.6.5 or above\nUpgrade to FortiSOAR on-premise version 7.5.3 or above\nUpgrade to FortiSOAR PaaS version 7.6.5 or above\nUpgrade to FortiSOAR PaaS version 7.5.3 or above"}], "references": [{"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-104", "name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-104"}], "descriptions": [{"lang": "en", "value": "A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.4, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to retrieve passwords for multiple installed connectors via server address modification in connector configuration."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-257", "description": "Information disclosure"}]}], "providerMetadata": {"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "shortName": "fortinet", "dateUpdated": "2026-11-06T15:42:06.677Z"}}}, "cveMetadata": {"cveId": "CVE-2026-22576", "state": "PUBLISHED", "dateUpdated": "2026-11-06T15:42:06.677Z", "dateReserved": "2026-01-07T18:30:44.883Z", "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "datePublished": "2026-04-14T15:38:05.576Z", "assignerShortName": "fortinet"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.0:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "FortiSOAR on-premise", "vendor": "Fortinet", "versions": [{"lessThanOrEqual": "7.6.4", "status": "affected", "version": "7.6.0", "versionType": "semver"}, {"lessThanOrEqual": "7.5.2", "status": "affected", "version": "7.5.0", "versionType": "semver"}, {"lessThanOrEqual": "7.4.5", "status": "affected", "version": "7.4.0", "versionType": "semver"}, {"lessThanOrEqual": "7.3.3", "status": "affected", "version": "7.3.0", "versionType": "semver"}]}, {"cpes": ["cpe:2.3:a:fortinet:fortisoarpaas:7.6.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.6.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.6.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.6.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.5.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisoarpaas:7.3.0:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "FortiSOAR PaaS", "vendor": "Fortinet", "versions": [{"lessThanOrEqual": "7.6.4", "status": "affected", "version": "7.6.0", "versionType": "semver"}, {"lessThanOrEqual": "7.5.2", "status": "affected", "version": "7.5.0", "versionType": "semver"}, {"lessThanOrEqual": "7.4.5", "status": "affected", "version": "7.4.0", "versionType": "semver"}, {"lessThanOrEqual": "7.3.3", "status": "affected", "version": "7.3.0", "versionType": "semver"}]}], "source": "psirt@fortinet.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*", "matchCriteriaId": "CD42D7DF-B095-44E1-B7E1-D203678DF740", "versionEndExcluding": "7.5.3", "versionStartIncluding": "7.3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*", "matchCriteriaId": "B8E1DFBC-0D1B-419C-89A5-D2A59B7485F6", "versionEndExcluding": "7.6.5", "versionStartIncluding": "7.6.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.4, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to retrieve passwords for multiple installed connectors via server address modification in connector configuration."}, {"lang": "es", "value": "Una vulnerabilidad de almacenamiento de contrase\u00f1as en formato recuperable en Fortinet FortiSOAR PaaS 7.6.0 hasta 7.6.4, FortiSOAR PaaS 7.5.0 hasta 7.5.2, FortiSOAR PaaS 7.4 todas las versiones, FortiSOAR PaaS 7.3 todas las versiones, FortiSOAR local 7.6.0 hasta 7.6.4, FortiSOAR local 7.5.0 hasta 7.5.2, FortiSOAR local 7.4 todas las versiones, FortiSOAR local 7.3 todas las versiones puede permitir a un atacante remoto autenticado recuperar contrase\u00f1as para m\u00faltiples conectores instalados a trav\u00e9s de la modificaci\u00f3n de la direcci\u00f3n del servidor en la configuraci\u00f3n del conector."}], "id": "CVE-2026-22576", "lastModified": "2026-11-06T16:17:57.537", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "psirt@fortinet.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-22576", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-14T16:29:52.411885Z", "version": "2.0.3"}}]}, "published": "2026-04-14T16:16:36.937", "references": [{"source": "psirt@fortinet.com", "tags": ["Vendor Advisory"], "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-104"}], "sourceIdentifier": "psirt@fortinet.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-257"}], "source": "psirt@fortinet.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-522"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.6.0,7.6.4]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.5.0,7.5.2]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.4.0,7.4.5]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.3.0,7.3.3]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "FortiSOAR on-premise", "source": "cna", "vendor": "Fortinet"}, "product": "fortisoaron-premise", "vendor": "fortinet"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.6.0,7.6.4]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.5.0,7.5.2]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.4.0,7.4.5]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.3.0,7.3.3]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "FortiSOAR PaaS", "source": "cna", "vendor": "Fortinet"}, "product": "fortisoarpaas", "vendor": "fortinet"}], "created": "2026-04-15T14:41:09.662914+00:00", "updated": "2026-05-06T18:30:09.258057+00:00", "vendors": ["fortinet", "fortinet$PRODUCT$fortisoaron-premise", "fortinet$PRODUCT$fortisoarpaas"]}