> SQL Injection via JSON RPC API
[DATE: 14/04/2026 07:00]
[LANGUAGE: EN]
CVSSv3 Score:
6.8
An improper neutralization of special elements used in an SQL command ('SQL injection') [CWE-89] in FortiAnalyzer, FortiAnalyzer Cloud, FortiManager and FortiManager Cloud may allow an authenticated privileged attacker to execute unauthorized code or commands via crafted requests.
Revised on 2026-04-14 00:00:00