FortiSOAR on-premise vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

FO

Product

FortiSOAR on-premise

by Fortinet · last CVE Sep 8, 2026

9

CVEs

0

On KEV

8.1

Max CVSS

0

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 0High 2Medium 7Low 0

Severity

All severities9 Critical0 High2 Medium7 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add FortiSOAR on-premise to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-22573	6.5	0%	Apr 14	An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5 all versions,… Affected: 7.6.0 through 7.6.3; 7.5.0 through 7.5.3; 7.4.0 through 7.4.5; 7.3.0 through 7.3.3
CVE-2026-21742	6.5	0%	Apr 14	A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all… Affected: 7.6.0 through 7.6.2; 7.5.0 through 7.5.1; 7.4.0 through 7.4.5; 7.3.0 through 7.3.3
CVE-2026-22574	6.5	0%	Apr 14	A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions,… Affected: 7.6.0 through 7.6.4; 7.5.0 through 7.5.2; 7.4.0 through 7.4.5; 7.3.0 through 7.3.3
CVE-2026-22576	6.5	0%	Apr 14	A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions,… Affected: 7.6.0 through 7.6.4; 7.5.0 through 7.5.2; 7.4.0 through 7.4.5; 7.3.0 through 7.3.3
CVE-2026-84385	5.4	0%	Sep 8	A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all… Affected: 7.6.0 through 7.6.6; 7.5.0 through 7.5.3; 7.4.0 through 7.4.5; 7.3.0 through 7.3.3
CVE-2026-22154	5.4	0%	Apr 14	An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through… Affected: 7.6.0 through 7.6.3; 7.5.0 through 7.5.2; 7.4.0 through 7.4.5; 7.3.0 through 7.3.3
CVE-2025-59809	4.3	0%	Apr 14	A server-side request forgery (ssrf) vulnerability [CWE-918] vulnerability in Fortinet FortiSOAR PaaS 7.6.4, FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through… Affected: 7.6.4; 7.6.0 through 7.6.2; 7.5.0 through 7.5.2; 7.4.0 through 7.4.5; 7.3.0 through 7.3.3