BetaIT-Hub is in early access — your feedback helps us improve. Use the chat or email [email protected]

News›⚠ Vulnerability
⚠ VulnerabilityFortinet PSIRT·85d ago

Format string vulnerability in fazsvcd

CVSSv3 Score: 6.5 A use of externally-controlled format string vulnerability [CWE-134] in FortiAnalyzer, FortiAnalyzer Cloud, FortiManager and FortiManager Cloud fazsvcd daemon may allow a remote privileged attacker with admin profile to execute arbitrary code or commands via specially crafted requests. Revised on 2026-03-10 00:00:00

Sign in to read the full article

Create a free account to access all news, downloads, and community features

Sign inCreate account

Originally published by Fortinet PSIRT

Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-092

This article is shared for informational purposes. All rights belong to the original author and publisher. If you are the copyright holder and would like this content removed, please contact us.

Shared on IT-Hub by admin