{"id":"CVE-2025-59809","title":"A server-side request forgery (ssrf) vulnerability [CWE-918] vulnerability in Fortinet FortiSOAR PaaS 7.6.4, FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all …","summary":"A server-side request forgery (ssrf) vulnerability [CWE-918] vulnerability in Fortinet FortiSOAR PaaS 7.6.4, FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all …","severity":"medium","cvss":4.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-918"],"vendor":"fortinet","product":"fortisoar","affected":["fortisoar >= 7.3.0, < 7.5.3","fortisoar >= 7.6.0, < 7.6.3","fortisoar = 7.6.4"],"patched":["fortisoar 7.6.3"],"published":"2026-04-14","updated":"2026-10-14","sourceUpdated":"2026-10-14T13:10:00.187","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-59809","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-103","label":"psirt@fortinet.com"}],"tags":["nvd"],"epss":0.00197,"epssPercentile":0.08717,"ingestedAt":"2026-10-14T13:30:58.479Z","slug":"CVE-2025-59809","body":"## Overview\n\nA server-side request forgery (ssrf) vulnerability [CWE-918] vulnerability in Fortinet FortiSOAR PaaS 7.6.4, FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.4, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated attacker to discover services running on local ports via crafted requests.\n\n## Affected\n\n- `fortisoar >= 7.3.0, < 7.5.3`\n- `fortisoar >= 7.6.0, < 7.6.3`\n- `fortisoar = 7.6.4`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `fortisoar 7.6.3`","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":23.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}