References https://nvd.nist.gov/vuln/detail/CVE-2023-42787 https://cve.imfht.com/detail/CVE-2023-42787?lang=en https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2023-42787 https://github.com/orangecertcc/security-research/security/advisories/GHSA-q5pq-8666-j8fr https://docs.fortinet.com/document/fortimanager-cloud/7.0.10/release-notes/752130 https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/10fe7bd1-69ff-11ee-a142-fa163e15d75b/fortianalyzer-cloud-v7.2.4-release-notes.pdf https://docs.fortinet.com/document/fortimanager/7.0.10/release-notes/972111/resolved-issues
Related VulnerabilitiesPoCCVE-2026-39808: Fortinet FortiSandbox - Command InjectionFortinet FortiSandbox /fortisandbox/job-detail/tracer-behavior 命令执行漏洞(CVE-2026-39808)PoCCVE-2026-21643: Fortinet FortiClientEMS 7.4.4 - SQL InjectionPoCCVE-2025-52970: Fortinet FortiWeb - Authentication Bypass to Admin PrivilegeFortinet FortiOS等 签名验证不当漏洞Fortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞(CVE-2025-64446/CVE-2025-58034)Fortinet FortiWeb 需授权 命令注入漏洞Fortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞(CVE-2025-64446)PoCFortinet FortiWeb 未授权身份验证绕过漏洞(CVE-2025-64446)