Medium severity5.4NVD Advisory· Published May 12, 2026· Updated May 18, 2026
CVE-2026-25088
CVE-2026-25088
Description
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0 through 7.4.9, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1- fortiguard.fortinet.com/psirt/FG-IR-26-134nvdVendor Advisory
News mentions
0No linked articles in our index yet.