{"vulnerability": "CVE-2026-23705", "sightings": [{"uuid": "05917a0d-72cd-4fa0-b450-d5c1c97cb73b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23705", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117434889421776260", "content": "CVE-2026-23705  An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.6, FortiManager 7.2 all versions may allow a low privileged user to execute arbitrary commands via crafted requests.\nhttps://www.cve.org/CVERecord?id=CVE-2026-23705https://fortiguard.fortinet.com/psirt/FG-IR-26-178#fortinet #Fortinet #FortiAnalyzer #FortiManager#CVE_2026_23705#bot", "creation_timestamp": "2026-10-13T17:56:46.753890Z"}, {"uuid": "ca731959-b706-48b5-9f8b-09a87bfa76c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-23705", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/fortinet-products-multiple-vulnerabilities_20261014", "content": "", "creation_timestamp": "2026-10-13T18:00:00.000000Z"}, {"uuid": "62fb473f-0e93-4a12-842c-689ce1086a1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-23705", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-high-and-critical-severity-vulnerabilities-fortinet-fortisiem", "content": "", "creation_timestamp": "2026-10-14T07:02:44.000000Z"}]}