References https://nvd.nist.gov/vuln/detail/CVE-2022-27488 https://www.fortiguard.com/psirt/FG-IR-22-038 https://www.cve.org/CVERecord?id=CVE-2022-27488 https://cve.imfht.com/detail/CVE-2022-27488 https://github.com/advisories/GHSA-qvxv-pfwq-9h5h https://cvepremium.circl.lu/vuln/CVE-2022-27488 https://app.opencve.io/cve/?vendor=fortinet&product=fortiai https://soc.cyber.wa.gov.au/advisories/20231218002-Fortinet-Security-Updates-for-Multiple-Products/
Related VulnerabilitiesZLMediaKit /index/ 未授权访问漏洞(CVE-2024-27488)PoCCVE-2026-39808: Fortinet FortiSandbox - Command InjectionFortinet FortiSandbox /fortisandbox/job-detail/tracer-behavior 命令执行漏洞(CVE-2026-39808)PoCCVE-2026-21643: Fortinet FortiClientEMS 7.4.4 - SQL InjectionPoCCVE-2025-52970: Fortinet FortiWeb - Authentication Bypass to Admin PrivilegeFortinet FortiOS等 签名验证不当漏洞Fortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞(CVE-2025-64446/CVE-2025-58034)Fortinet FortiWeb 需授权 命令注入漏洞Fortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞(CVE-2025-64446)