CVE-2026-22154

MediumCVSS 5.4/10Last modified Nov 6, 2026

Description

An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to perform a stored cross site scripting (XSS) attack via crafted HTTP Requests.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Fortinet	FortiSOAR on-premise	>= 7.6.0, <= 7.6.3; >= 7.5.0, <= 7.5.2; >= 7.4.0, <= 7.4.5; >= 7.3.0, <= 7.3.3
Fortinet	FortiSOAR PaaS	>= 7.6.0, <= 7.6.3; >= 7.5.0, <= 7.5.2; >= 7.4.0, <= 7.4.5; >= 7.3.0, <= 7.3.3

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-117Vendor Advisory

Timeline

Published: Apr 14, 2026
Last modified: Nov 6, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-221557.5A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through CVE-2026-22164.3A flaw has been found in rachelos WeRSS we-mp-rss up to 1.4.8. Impacted is the function download_export_file of the file apis/tools.py. Exec CVE-2026-221637.8Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows su CVE-2026-221647.5Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory. By creating reso CVE-2026-221658.1A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF crash in the GPU GLES us CVE-2026-221668.1A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user CVE-2026-221677.8Software installed and run as a non-privileged user may conduct improper GPU system calls to force GPU to write to arbitrary physical memory CVE-2026-221688.8OpenClaw versions prior to 2026.2.21 contain an approval-integrity mismatch vulnerability in system.run that allows authenticated operators CVE-2026-221696.7OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safeBins configuration that allows attackers to invoke CVE-2026-22179.8A vulnerability was found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of the file /admin/manage CVE-2026-221706.5OpenClaw versions prior to 2026.2.22 with the optional BlueBubbles plugin contain an access control bypass vulnerability where empty allowFr CVE-2026-221719.1OpenClaw versions prior to 2026.2.19 contain a path traversal vulnerability in the Feishu media download flow where untrusted media keys are