CVE-2025-46773

Summary

A SQL injection vulnerability in Fortinet FortiAnalyzer allows low-privileged users to execute arbitrary commands by crafting malicious requests. This represents a significant security risk as it can lead to full system compromise.

Exploitability

Exploitation requires a low-privileged user account and is relatively straightforward, involving crafting specific HTTP requests that trigger SQL injection in the application's backend database operations.

Blast radius

If exploited, this vulnerability could allow attackers to execute arbitrary commands on the FortiAnalyzer system, potentially leading to complete system compromise, data exfiltration, and unauthorized access to network security logs and configurations.

Detection

Monitor for unusual SQL error messages in application logs, particularly those containing database-specific error codes and stack traces that indicate SQL injection attempts.

Prioritized remediation

Upgrade to FortiAnalyzer 7.6.5 or later for version 7.6.x, 7.4.8 or later for version 7.4.x, or 7.2.12 or later for version 7.2.x

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.