A server-side request forgery (ssrf) vulnerability [CWE-918] vulnerability in Fortinet FortiSOAR PaaS 7.6.4, FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.4, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated attacker to discover services running on local ports via crafted requests.
References
| Link | Resource |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-26-103 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
06 May 2026, 16:05
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:fortinet:fortisoar:7.6.4:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:* |
|
| First Time |
Fortinet
Fortinet fortisoar |
|
| References | () https://fortiguard.fortinet.com/psirt/FG-IR-26-103 - Vendor Advisory |
14 Apr 2026, 16:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-14 16:16
Updated : 2026-05-06 16:05
NVD link : CVE-2025-59809
Mitre link : CVE-2025-59809
CVE.ORG link : CVE-2025-59809
JSON object : View
Products Affected
fortinet
- fortisoar
CWE
CWE-918
Server-Side Request Forgery (SSRF)