Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2977 articles · 110847 vulns · 36/41 feeds (7d)
← Back to list
7.9
CVE-2026-39815EXPLOITEDPATCHED
Fortinet · FortiDDoS-F

CVE-2026-39815: A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiDD

Description

A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiDDoS-F 7.2.1 through 7.2.2 may allow attacker to execute unauthorized code or commands via sending crafted HTTP requests

Affected Products

VendorProductVersions
FortinetFortiDDoS-F7.2.1

References

  • https://fortiguard.fortinet.com/psirt/FG-IR-26-119

Related News (2 articles)

Tier C
VulDB6h ago
CVE-2026-39815 | Fortinet FortiDDoS-F up to 7.2.2 sql injection (FG-IR-26-119)
→ No new info (linked only)
Tier A
Fortinet PSIRT15h ago
SQL Injection via API
→ No new info (linked only)
CVSS 3.17.9 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
7.2.3
CWECWE-89
PublishedApr 14, 2026
Last enriched7h agov2
Trending Score62
Source articles2
Independent2
Info Completeness10/14
Missing: epss, kev, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-21643EXPKEV
CVE-2026-21643: An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiC
Trending: 152
CRITICALCVE-2026-35616EXPKEV
CVE-2026-35616: A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated atta
Trending: 131
CRITICALCVE-2026-39808EXP
CVE-2026-39808: A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet F
Trending: 74
CRITICALCVE-2026-39813EXP
CVE-2026-39813: A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.
Trending: 74
HIGHCVE-2026-22828EXP
CVE-2026-22828: A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.6.2
Trending: 62

Pin to Dashboard

Verification

State: verified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 14, 2026
Discovered by ZDM
Apr 14, 2026
Updated: description, affectedVersions, exploitAvailable, activelyExploited, patchAvailable
Apr 14, 2026
Actively Exploited
Apr 14, 2026
Exploit Available
Apr 14, 2026
Patch Available
Apr 14, 2026

Version History

v2
Last enriched 7h ago
v2Tier A7h ago

Updated description with more technical detail, added affected version 7.2.3, and marked exploit availability and active exploitation as true.

descriptionaffectedVersionsexploitAvailableactivelyExploitedpatchAvailable
via Fortinet PSIRT
v17h ago

Initial creation