CVE-2026-22576

A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.4, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to retrieve passwords for multiple installed connectors via server address modification in connector configuration.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - psirt@fortinet.com

Published

2026-04-14

Last modified

2026-10-26

Weaknesses

CWE-257, CWE-522

Affected products

• Fortisoar (Fortinet)
• Fortisoaron-premise (Fortinet)
• Fortisoarpaas (Fortinet)

References

• https://fortiguard.fortinet.com/psirt/FG-IR-26-104