SQL Injection Vulnerability in Fortinet FortiAnalyzer Products
CVE-2025-49784

5.6MEDIUM

Key Information:

Vendor

Fortinet
Status
Fortianalyzer-bigdata
Fortianalyzer
Vendor
CVE Published:
10 March 2026

What is CVE-2025-49784?

An SQL injection vulnerability exists in Fortinet's FortiAnalyzer products, specifically allowing authenticated attackers to craft malicious requests. This can lead to unauthorized code execution, compromising the integrity and security of the systems. Various versions of FortiAnalyzer and FortiAnalyzer-BigData from 6.2 up to 7.6.4 are affected, emphasizing the critical need for timely updates and patches. For detailed information, refer to the official Fortinet security advisory.

Affected Version(s)

FortiAnalyzer 7.6.0 <= 7.6.3

FortiAnalyzer-BigData 7.6.0

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-095

CVSS V3.1

Score:
5.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.