FortiAnalyzer and FortiManager: SQL injection via JSON RPC API detected

A SQL injection vulnerability has been discovered in Fortinet's FortiAnalyzer and FortiManager products via their JSON RPC API, allowing an attacker to execute malicious SQL commands.

Published 5sem1 sourceImportant

Lire en français

≈ 25sSpeed

The fact

The flaw affects the remote administration interface of these widely deployed enterprise security appliances.

Fortinet recommends immediate updates to neutralize this critical flaw exposing sensitive databases.

Click the link to read an article on the topic:

GlobalSecurityMag

Explore this topic

Fortinet #FortiAnalyzer #FortiManager #injection SQL #API JSON RPC

What if you saw the whole news differently?Factae cross-checks hundreds of sources worldwide to keep only the fact, no opinion. Explore the front page.

Follow topic →

Auto-synthesis from 1 media source · identified on June 14, 2026

← Back to home

The fact

Read more

FortiAnalyzer and FortiManager vulnerable to buffer overflow

Vulnérabilité dans YARA via Compiled Rule OP_COUNT permettant un déni de service ou une fuite d'informations

Vulnérabilité dans Sudo via exec_mailer() permettant une élévation de privilèges

FortiClient EMS: Critical vulnerability exploited to deploy malware

FortiOS: directory traversal via command-line interface

FortiBleed vulnerability exposes thousands of servers to compromise