FortiSOAR PaaS vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

FP

Product

FortiSOAR PaaS

by Fortinet · last CVE Sep 8, 2026

11

CVEs

0

On KEV

8.1

Max CVSS

0

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 0High 2Medium 9Low 0

Severity

All severities11 Critical0 High2 Medium9 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add FortiSOAR PaaS to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-59808	6.8	0%	Dec 9	An unverified password change vulnerability [CWE-620] vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.1, FortiSOAR PaaS 7.4 all… Affected: 7.6.0 through 7.6.2; 7.5.0 through 7.5.1; 7.4.0 through 7.4.5; 7.3.0 through 7.3.3
CVE-2026-22573	6.5	0%	Apr 14	An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5 all versions,… Affected: 7.6.0 through 7.6.3; 7.5.0 through 7.5.3; 7.4.0 through 7.4.5; 7.3.0 through 7.3.3
CVE-2026-21742	6.5	0%	Apr 14	A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all… Affected: 7.6.0 through 7.6.2; 7.5.0 through 7.5.1; 7.4.0 through 7.4.5; 7.3.0 through 7.3.3
CVE-2026-22574	6.5	0%	Apr 14	A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions,… Affected: 7.6.0 through 7.6.4; 7.5.0 through 7.5.2; 7.4.0 through 7.4.5; 7.3.0 through 7.3.3
CVE-2026-22576	6.5	0%	Apr 14	A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions,… Affected: 7.6.0 through 7.6.4; 7.5.0 through 7.5.2; 7.4.0 through 7.4.5; 7.3.0 through 7.3.3
CVE-2025-59810	6.5	0%	Dec 9	An improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.1, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3… Affected: 7.6.0 through 7.6.2; 7.5.0 through 7.5.1; 7.4.0 through 7.4.5; 7.3.0 through 7.3.3
CVE-2026-84385	5.4	0%	Sep 8	A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all… Affected: 7.6.0 through 7.6.6; 7.5.0 through 7.5.3; 7.4.0 through 7.4.5; 7.3.0 through 7.3.3
CVE-2026-22154	5.4	0%	Apr 14	An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through… Affected: 7.6.0 through 7.6.3; 7.5.0 through 7.5.2; 7.4.0 through 7.4.5; 7.3.0 through 7.3.3
CVE-2025-59809	4.3	0%	Apr 14	A server-side request forgery (ssrf) vulnerability [CWE-918] vulnerability in Fortinet FortiSOAR PaaS 7.6.4, FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through… Affected: 7.6.4; 7.6.0 through 7.6.2; 7.5.0 through 7.5.2; 7.4.0 through 7.4.5; 7.3.0 through 7.3.3