CVE-2026-22574

published 2026-04-14

CVE-2026-22574: A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS…

Priority P3 41 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.4, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to retrieve Service account password via server address modification in LDAP configuration.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
fortinet	fortinet	—	—
fortinet	fortisoar	—	—
fortinet	fortisoar	>= 7.3.0 < 7.5.3	7.5.3
fortinet	fortisoar	>= 7.6.0 < 7.6.5	7.6.5
fortinet	fortisoar_on-premise	7.3.0 – 7.3.3	—
fortinet	fortisoar_on-premise	7.4.0 – 7.4.5	—
fortinet	fortisoar_on-premise	7.5.0 – 7.5.2	—
fortinet	fortisoar_on-premise	7.6.0 – 7.6.4	—
fortinet	fortisoar_paas	7.3.0 – 7.3.3	—
fortinet	fortisoar_paas	7.4.0 – 7.4.5	—
fortinet	fortisoar_paas	7.5.0 – 7.5.2	—
fortinet	fortisoar_paas	7.6.0 – 7.6.4	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-257