Fortinet SQLi Hits FortiAnalyzer, FortiManager

The National Vulnerability Database (NVD) recently disclosed CVE-2025-61848, a high-severity SQL injection vulnerability impacting a wide range of Fortinet products. Specifically, this flaw affects FortiAnalyzer and FortiManager, including their cloud variants, across multiple versions (7.6.0-7.6.4, 7.4.0-7.4.8, and all versions of 7.2 and 7.0).

This vulnerability, classified under CWE-89, could allow a privileged, authenticated attacker to execute unauthorized code or commands. The attack vector leverages the JSON RPC API, making it a critical concern for organizations relying on these Fortinet platforms for their security operations and network management. The NVD assigns a CVSS score of 7.2 (HIGH), underscoring the potential for significant impact if exploited. Given the administrative nature of these products, a successful compromise could grant an attacker deep access and control over an organization’s security infrastructure.