Security Advisory

CVE-2026-22573

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-04-14 15:38:22
Last updated 2026-04-14 16:46:14
Assigner fortinet
State PUBLISHED

Description

An improper limitation of a pathname to a restricted directory (path traversal) vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5 all versions, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5 all versions, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to perform path traversal attack via File Content Extraction actions.