CVE-2026-21742
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated attacker to view cleartext password in response for Secure Message Exchange and Radius queries, if configured
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
FortiSOAR on-premise
- Vendor
- Fortinet
- Product
- FortiSOAR on-premise
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 7.6.0 | affected | semver | Unavailable | 7.6.2 | None listed |
| 7.5.0 | affected | semver | Unavailable | 7.5.1 | None listed |
| 7.4.0 | affected | semver | Unavailable | 7.4.5 | None listed |
| 7.3.0 | affected | semver | Unavailable | 7.3.3 | None listed |
FortiSOAR PaaS
- Vendor
- Fortinet
- Product
- FortiSOAR PaaS
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 7.6.0 | affected | semver | Unavailable | 7.6.2 | None listed |
| 7.5.0 | affected | semver | Unavailable | 7.5.1 | None listed |
| 7.4.0 | affected | semver | Unavailable | 7.4.5 | None listed |
| 7.3.0 | affected | semver | Unavailable | 7.3.3 | None listed |