CVE-2026-22576
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.4, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to retrieve passwords for multiple installed connectors via server address modification in connector configuration.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
FortiSOAR PaaS
- Vendor
- Fortinet
- Product
- FortiSOAR PaaS
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 7.6.0 | affected | semver | Unavailable | 7.6.4 | None listed |
| 7.5.0 | affected | semver | Unavailable | 7.5.2 | None listed |
| 7.4.0 | affected | semver | Unavailable | 7.4.5 | None listed |
| 7.3.0 | affected | semver | Unavailable | 7.3.3 | None listed |
FortiSOAR on-premise
- Vendor
- Fortinet
- Product
- FortiSOAR on-premise
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 7.6.0 | affected | semver | Unavailable | 7.6.4 | None listed |
| 7.5.0 | affected | semver | Unavailable | 7.5.2 | None listed |
| 7.4.0 | affected | semver | Unavailable | 7.4.5 | None listed |
| 7.3.0 | affected | semver | Unavailable | 7.3.3 | None listed |