Fortinet FortiAnalyzer und FortiManager: Mehrere Schwachstellen CVSS 8.1
Summary
CERT-Bund, operated by the German Federal Office for Information Security (BSI), published security advisory WID-SEC-2026-1093 warning of multiple vulnerabilities in Fortinet FortiAnalyzer and FortiManager products. Affected versions include FortiManager below 7.4.8/7.4.9/7.6.5 and FortiAnalyzer below 7.4.8/7.4.9/7.6.5, with Cloud variants also affected. The vulnerabilities carry a CVSS Base Score of 8.1 (high) and enable remote attackers to manipulate files, perform SQL injection, and execute arbitrary code.
What changed
CERT-Bund issued security advisory WID-SEC-2026-1093 identifying multiple vulnerabilities in Fortinet FortiAnalyzer and FortiManager products. The vulnerabilities affect versions prior to 7.4.8/7.4.9/7.6.5 depending on the product line, with Cloud variants also impacted. A remote attacker can exploit these flaws to manipulate files, conduct SQL injection attacks, and execute arbitrary code. The CVSS Base Score is 8.1 (high) with a Temporal Score of 7.1.
Organizations using affected Fortinet FortiAnalyzer and FortiManager products should update to patched versions immediately. These products are used for log management, analysis, reporting, and centralized security device management. Given the availability of remote exploitation and the high CVSS score, priority patching is recommended. The advisory notes that mitigations are available.
What to do next
- Update Fortinet FortiAnalyzer to version 7.4.9, 7.6.5, or later
- Update Fortinet FortiManager to version 7.4.8, 7.4.9, 7.6.5, or later
Archived snapshot
Apr 16, 2026GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.
[WID-SEC-2026-1093] Fortinet FortiAnalyzer und FortiManager: Mehrere Schwachstellen CVSS Base Score 8.1 (hoch) CVSS Temporal Score 7.1 (hoch) Remoteangriff ja Datum 14.04.2026 Stand 15.04.2026 Mitigation ja
Betroffene Systeme
Betriebssystem
- Appliance
- Sonstiges
Produktbeschreibung
FortiAnalyzer ist eine Plattform zur Protokollverwaltung, Analyse und Berichterstellung.
FortiManager Security Management Appliances ermöglicht die Verwaltung von Fortinet Network Security Geräten.
Produkte
14.04.2026
- Fortinet FortiManager <7.4.8
Fortinet FortiAnalyzer <7.4.9
Fortinet FortiAnalyzer <7.4.8
Fortinet FortiAnalyzer <7.6.5
Fortinet FortiManager <7.4.9
Fortinet FortiManager <7.6.5
Fortinet FortiAnalyzer Cloud <7.6.5
Fortinet FortiManager Cloud <7.6.5
Angriff
Angriff
Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiAnalyzer und Fortinet FortiManager ausnutzen, um Dateien zu manipulieren, eine SQL Injection durchzuführen und Code auszuführen. CVE Informationen Versionshistorie Feedback zum Advisory geben
Related changes
Get daily alerts for CERT-Bund Security Advisories
Daily digest delivered to your inbox.
Free. Unsubscribe anytime.
Source
About this page
Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission
Source document text, dates, docket IDs, and authority are extracted directly from BSI.
The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.
Classification
Who this affects
Taxonomy
Browse Categories
Get alerts for this source
We'll email you when CERT-Bund Security Advisories publishes new changes.
Subscribed!
Optional. Filters your digest to exactly the updates that matter to you.