{"id":"CVE-2025-46773","published":"2026-10-13T18:17:11.940","lastModified":"2026-10-15T12:10:00.230","description":"An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.11 may allow a low privileged user to execute arbitrary commands via crafted requests.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-89"],"vendors":[],"products":[],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-246","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A SQL injection vulnerability in Fortinet FortiAnalyzer allows low-privileged users to execute arbitrary commands by crafting malicious requests. This represents a significant security risk as it can lead to full system compromise.","exploitability":"Exploitation requires a low-privileged user account and is relatively straightforward, involving crafting specific HTTP requests that trigger SQL injection in the application's backend database operations.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary commands on the FortiAnalyzer system, potentially leading to complete system compromise, data exfiltration, and unauthorized access to network security logs and configurations.","remediation":"Upgrade to FortiAnalyzer 7.6.5 or later for version 7.6.x, 7.4.8 or later for version 7.4.x, or 7.2.12 or later for version 7.2.x","detection":"Monitor for unusual SQL error messages in application logs, particularly those containing database-specific error codes and stack traces that indicate SQL injection attempts.","tags":["sql-injection","rce","network-security"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:49:51.526Z"}}