PT-2025-50121 · Fortinet · Fortisoar Paas+1

Published 2025-12-09 · Updated 2025-12-10 · CVE-2025-59810

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Fortinet FortiSOAR PaaS versions 7.3 through 7.6.2 Fortinet FortiSOAR on-premise versions 7.3 through 7.6.2

Description An improper access control issue exists that may allow an authenticated attacker to disclose information via crafted requests.

Recommendations FortiSOAR PaaS versions 7.3 through 7.6.2 should be updated. FortiSOAR on-premise versions 7.3 through 7.6.2 should be updated.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-59810

Affected Products

Fortisoar Paas

Fortisoar On-Premise

References · 4

• https://osv.dev/vulnerability/CVE-2025-59810 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59810 · Security Note
• https://fortiguard.fortinet.com/psirt/FG-IR-25-601 · Vendor Advisory
• https://twitter.com/CVEnew/status/1998781397893345540 · Twitter Post