https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-13T14:04:45.665995+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/certfr-2026-avi-1499 certfr-2026-avi-1499 — De multiples vulnérabilités ont été découvertes dans les produits Fortinet. Certaines d'entre elles permettent à un att… 2026-11-13T14:04:45.669716+00:00 certfr-2026-avi-1499 https://db.gcve.eu/vuln/fkie_cve-2026-126176 fkie_cve-2026-126176 2026-11-13T14:04:45.669778+00:00

A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an unauthenticated remote attacker to inject arbitary content into a signed SAML response via crafted SAML requests.

 https://db.gcve.eu/vuln/ghsa-5p6g-x54v-5xcx GHSA-5p6g-x54v-5xcx 2026-11-13T14:04:45.669822+00:00

A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an unauthenticated remote attacker to inject arbitary content into a signed SAML response via crafted SAML requests.

 https://db.gcve.eu/vuln/ncsc-2026-0488 NCSC-2026-0488 — Kwetsbaarheden verholpen in Fortinet FortiManager en FortiAnalyzer 2026-11-13T14:04:45.669846+00:00 NCSC-2026-0488 https://db.gcve.eu/vuln/wid-sec-w-2026-4519 WID-SEC-W-2026-4519 — Fortinet Produkte: Mehrere Schwachstellen 2026-11-13T14:04:45.669924+00:00

Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiOS, Fortinet FortiManager, Fortinet FortiMail, Fortinet FortiAnalyzer und Fortinet FortiAuthenticator ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsmechanismen zu umgehen, seine Berechtigungen zu erweitern, um Daten zu manipulieren und um einen Denial of Service herbezizuführen.