CVE-2026-23573

6.1 Moyenne

Publiée le 14/07/2026 à 18:16 · Modifiée le 11/08/2026 à 15:17 · Modifiée · Source : psirt@fortinet.com

Description

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.8.0, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.3, FortiProxy 7.2.0 through 7.2.9 may allow an authenticated remote user to execute code or commands via crafted requests.

Traduire en français

Produits concernés

Fortinet FortiOS
Fortinet FortiProxy
Fortinet FortiPAM
Siemens RUGGEDCOM APE1808

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.1 Moyenne	psirt@fortinet.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-79

Références

https://fortiguard.fortinet.com/psirt/FG-IR-26-150 Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-127084.html

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories