Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5.0 through 7.5.2 may allow an unauthenticated attacker to bypass authentication via replaying captured 2FA request. The attack requires being able to intercept and decrypt authentication traffic and precise timing to replay the request before token expiration, which raises the attack complexity.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-23708 A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR on-premise 7.6.0 through 7.6.3, … https://www.cve.org/CVERecord?id=CVE-2026-23708
Post summary
The text announces CVE-2026-23708, an improper authentication vulnerability affecting specific FortiSOAR version ranges, with a link to the CVE record for further details.
⚠️ HIGH — CVE-2026-23708 A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.… CVSS 7.5 Full analysis → https://sec.kaitan.id/cves/CVE-2026-23708 #Fortinet #CyberSecurity #InfoSec
Post summary
The post announces a newly disclosed improper authentication vulnerability (CVE-2026-23708) in Fortinet FortiSOAR PaaS with CVSS 7.5, directing readers to a full analysis but providing no proof of exploitation or patches.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | fortinet | fortisoar | - | - | - |