PatchTheCVE: fortisoarhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2026-23708: A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 thttps://patchthecve.com/cve/CVE-2026-23708.htmlhttps://patchthecve.com/cve/CVE-2026-23708.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 7.5: A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5.0 through 7.5.2 may allow an unauthenticated attacker to bypass authentication via replaying captured 2FA reqCVE-2026-22576: A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, Forthttps://patchthecve.com/cve/CVE-2026-22576.htmlhttps://patchthecve.com/cve/CVE-2026-22576.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 4.3: A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.4, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOACVE-2026-22574: A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, Forthttps://patchthecve.com/cve/CVE-2026-22574.htmlhttps://patchthecve.com/cve/CVE-2026-22574.htmlMon, 26 Oct 2026 22:10:00 +0000MEDIUM 4.1: A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.4, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOACVE-2026-22573: An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet Fohttps://patchthecve.com/cve/CVE-2026-22573.htmlhttps://patchthecve.com/cve/CVE-2026-22573.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 6.5: An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5 all versions, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-prCVE-2026-22155: A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3https://patchthecve.com/cve/CVE-2026-22155.htmlhttps://patchthecve.com/cve/CVE-2026-22155.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 6.5: A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1, FoCVE-2026-22154: An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortihttps://patchthecve.com/cve/CVE-2026-22154.htmlhttps://patchthecve.com/cve/CVE-2026-22154.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 4.6: An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSCVE-2026-21742: A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3https://patchthecve.com/cve/CVE-2026-21742.htmlhttps://patchthecve.com/cve/CVE-2026-21742.htmlMon, 26 Oct 2026 22:10:00 +0000MEDIUM 5.7: A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1, Fo