Login Request a demo
High severity · published May 12, 2026
CVE-2026-25088
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0 through 7.4.9,…
8.8
CVSS
0.3%
EPSS
No
On KEV
Description
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0 through 7.4.9, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FO
FortiNDR · Fortinet
7.6.0 through 7.6.2; 7.4.0 through 7.4.9; 7.2.0 through 7.2.5; 7.1.0 through 7.1.1; 7.0.0 through 7.0.7 · source: vendor, NVD
Affected product
FO
FortiNDR
Fortinet
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-25088
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-25088
Vendor Advisory
https://fortiguard.fortinet.com/psirt/FG-IR-26-134
More from FortiNDR
9.8
CVE-2025-32756
Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
8.8
CVE-2023-33302
A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiMail webmail and administrative interface version 6.4.0 through 6.4.4 and before 6.2.6…
8.8
CVE-2023-48790
A cross site request forgery vulnerability [CWE-352] in Fortinet FortiNDR version 7.4.0, 7.2.0 through 7.2.1 and 7.1.0 through 7.1.1 and before 7.0.5 may allow a remote…
8.8
CVE-2022-27488
A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7,…
6.7
CVE-2021-42757
A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code…