PT-2026-40114 · Fortinet · Fortideceptor

Publicado 2026-05-12 · Atualizado 2026-05-12 · CVE-2026-25690

Mitre

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0 through 5.3.3, FortiDeceptor 5.2.0 through 5.2.1, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions may allow an authenticated attacker with at least read-only admin permission to read log files via HTTP crafted requests.

Correção

Argument Injection

Enumeração de Fraquezas

CWE-88

Identificadores relacionados

CVE-2026-25690

Produtos afetados

Fortideceptor

Referências · 2

• https://fortiguard.fortinet.com/psirt/FG-IR-26-138 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-25690 · Nota de Segurança