Vulnerabilities
FortiAnalyzer/FortiManager SQL Injection Enables Arbitrary File Read/Write
Fortinet disclosed a SQL injection flaw (CWE‑89) that allows low‑privileged users to read or write arbitrary files on FortiAnalyzer, FortiManager, and their cloud variants. The vulnerability can lead to full device compromise and network exposure. Immediate patching and access restrictions are required.
What happened
Fortinet disclosed a SQL injection flaw (CWE‑89) that lets a low‑privileged user craft requests to read or write arbitrary files on FortiAnalyzer, FortiManager, and their cloud variants.
Impact
Once exploited, an attacker can read sensitive configuration files or overwrite system files, potentially leading to full compromise of the device and the network it protects.
What to do
- Apply the latest firmware or patch released by Fortinet (check FortiGuard for version numbers).
- Restrict network access to the management interfaces; enable IP filtering or VPN only for trusted administrators.
- Monitor for anomalous SQL queries or file‑access activity using your SIEM or FortiSIEM.
- Consider disabling unused services or applying least‑privilege roles on the affected devices.
Fortinet recommends immediate patching to mitigate CVSS 7.9 risk.
Related vulnerabilities
Fortinet Issues Mass Security Fixes for RCE and Privilege Escalation Vulnerabilities
Fortinet has released updates resolving multiple security vulnerabilities across its product portfolio, including FortiOS, FortiManager, and FortiAnalyzer. Successful exploitation could allow remote code execution, privilege escalation, and denial-of-service attacks. Network administrators should patch affected installations promptly.
Read briefing
Cisco Unified Intelligence Center: Authenticated Local SQL Injection Exposes Internal Database
Cisco has identified a medium‑severity blind SQL injection flaw in the web‑based management interface of its Unified Intelligence Center. The bug requires valid user credentials and lets an attacker read the device’s internal database. No workaround exists; Cisco has released patches. The issue is catalogued as CVE‑2026‑20327.
Read briefing
Cisco Crosswork Network Controller Vulnerability Enables Remote Command Execution via Template Injection
A server‑side template injection flaw in Cisco Crosswork Network Controller’s web interface allows authenticated users with write‑privileged template accounts to run arbitrary OS commands on the device. The issue is caused by insufficient input validation in the configuration template engine. Cisco has released patches; no workaround exists. The flaw is rated Medium and carries CVE‑2026‑20220.
Read briefing
Adobe Releases Patches for Nine Critical Connect Flaws and Six AEM Forms Vulnerabilities
Adobe has issued updates that fix nine critical defects in Adobe Connect and six critical flaws in AEM Forms, all capable of enabling arbitrary code execution or privilege escalation. The patches address SQL injection, XSS, SSRF, and path traversal issues. Defenders should apply the updates immediately and verify affected versions.
Read briefing