CVE-2024-48892: Fortinet Fortisoar

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

A relative path traversal vulnerability [CWE-23] in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all versions may allow an authenticated attacker to read arbitrary files via uploading a malicious solution pack.

Affected products

• Fortinet Fortisoar: from 7.3.0, before 7.5.2 (fixed in 7.5.2); version 7.6.0 only

Published 2025-08-12. Last modified 2026-06-17.