CVE-2026-25690
Full vulnerability record from the local CVENow database.
Description
An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0 through 5.3.3, FortiDeceptor 5.2.0 through 5.2.1, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions may allow an authenticated attacker with at least read-only admin permission to read log files via HTTP crafted requests.
Severity
MEDIUM
CVSS score
6.5
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-05-12 18:16:39.540000
Last modified
2026-10-26 18:10:00.173000
View original CVE JSON
{
"id": "CVE-2026-25690",
"sourceIdentifier": "[email protected]",
"published": "2026-05-12T18:16:39.540",
"lastModified": "2026-10-26T18:10:00.173",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0 through 5.3.3, FortiDeceptor 5.2.0 through 5.2.1, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions may allow an authenticated attacker with at least read-only admin permission to read log files via HTTP crafted requests."
},
{
"lang": "es",
"value": "Una neutralización incorrecta de delimitadores de argumentos en un comando (’inyección de argumentos’) vulnerabilidad en Fortinet FortiDeceptor 6.0.0 hasta 6.0.2, FortiDeceptor 5.3.0 hasta 5.3.3, FortiDeceptor 5.2.0 hasta 5.2.1, FortiDeceptor 5.1 todas las versiones, FortiDeceptor 5.0 todas las versiones puede permitir a un atacante autenticado con al menos permiso de administrador de solo lectura leer archivos de registro a través de solicitudes HTTP manipuladas."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Fortinet",
"product": "FortiDeceptor",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:a:fortinet:fortideceptor:6.0.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortideceptor:6.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortideceptor:6.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortideceptor:5.3.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortideceptor:5.3.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortideceptor:5.3.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortideceptor:5.3.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortideceptor:5.2.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortideceptor:5.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortideceptor:5.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortideceptor:5.0.0:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "6.0.0",
"lessThanOrEqual": "6.0.2",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.3.0",
"lessThanOrEqual": "5.3.3",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.2.0",
"lessThanOrEqual": "5.2.1",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.1.0",
"status": "affected"
},
{
"version": "5.0.0",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-05-12T19:00:14.405140Z",
"id": "CVE-2026-25690",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-88"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortideceptor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.0.0",
"versionEndIncluding": "5.1.0",
"matchCriteriaId": "529C7194-BEA5-47FE-A317-59D85FD444FC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortideceptor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.3.0",
"versionEndIncluding": "5.3.3",
"matchCriteriaId": "50797191-4601-4419-815A-63F2AB1A15DB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortideceptor:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.0.0",
"versionEndIncluding": "6.0.2",
"matchCriteriaId": "E1992EF6-28F6-4E42-8E1B-3635C7F56799"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortideceptor:5.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "6FA247B9-FC0D-4E38-A29A-518331F84C94"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:fortideceptor:5.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "BB69110A-08A1-444F-9B67-E098D07534E4"
}
]
}
]
}
],
"references": [
{
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-138",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}