Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 04:13:20 +0000 bdu:2026-05559 https://vulnerability.circl.lu/vuln/bdu:2026-05559 bdu:2026-05559 https://vulnerability.circl.lu/vuln/bdu:2026-05559 certfr-2026-avi-0440 — De multiples vulnérabilités ont été découvertes dans les produits Fortinet. Certaines d'entre elles permettent à un att… https://vulnerability.circl.lu/vuln/certfr-2026-avi-0440 certfr-2026-avi-0440 https://vulnerability.circl.lu/vuln/certfr-2026-avi-0440 fkie_cve-2026-22154 https://vulnerability.circl.lu/vuln/fkie_cve-2026-22154 <p>An improper neutralization of input during web page generation (&#39;cross-site scripting&#39;) vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to perform a stored cross site scripting (XSS) attack via crafted HTTP Requests.</p> <p>An improper neutralization of input during web page generation (&#39;cross-site scripting&#39;) vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to perform a stored cross site scripting (XSS) attack via crafted HTTP Requests.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-22154 GHSA-p356-hfrx-f579 https://vulnerability.circl.lu/vuln/ghsa-p356-hfrx-f579 <p>An improper neutralization of input during web page generation (&#39;cross-site scripting&#39;) vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to perform a stored cross site scripting (XSS) attack via crafted HTTP Requests.</p> <p>An improper neutralization of input during web page generation (&#39;cross-site scripting&#39;) vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to perform a stored cross site scripting (XSS) attack via crafted HTTP Requests.</p> https://vulnerability.circl.lu/vuln/ghsa-p356-hfrx-f579