CVE-2026-25690

MEDIUM

An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0 through 5.3.3, FortiDeceptor 5...

Affects 1 product across 1 vendor.

BCS4.21
CVSS 3.16.5
EPSS0.2%
Percentile15th
PatchPatched
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, no integrity impact, no availability impact.
CWE Weakness Definitions
CWE-88: CWE-88
Related Attack Patterns (CAPEC)
CAPEC-41 Using Meta-characters in E-mail Headers to Inject Malicious Payloads
via CWE-88
CAPEC-174 Flash Parameter Injection
via CWE-88
CAPEC-460 HTTP Parameter Pollution (HPP)
via CWE-88
CAPEC-88 OS Command Injection
via CWE-88
CAPEC-137 Parameter Injection
via CWE-88

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ SAGE Intelligence — CITED Relevance Research Team

A vulnerability in Fortinet FortiDeceptor allows an authenticated attacker with read-only admin permissions to read log files through crafted HTTP requests due to improper neutralization of argument delimiters in a command.

BSID: BS-2026-GLOBAL-269829-M • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2026-25690?
A vulnerability in Fortinet FortiDeceptor allows an authenticated attacker with read-only admin permissions to read log files through crafted HTTP requests due to improper neutralization of argument delimiters in a command.
What is the CVSS score for CVE-2026-25690?
CVE-2026-25690 has CVSS 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS: 0.2%.
Is CVE-2026-25690 actively exploited?
No confirmed active exploitation of CVE-2026-25690 as of 2026-05-30.
How do I remediate CVE-2026-25690?
Priority: MEDIUM. Advisory: https://fortiguard.fortinet.com/psirt/FG-IR-26-138 PSIRT: [email protected]
What systems are affected by CVE-2026-25690?
CVE-2026-25690 affects: Fortinet.
Vulnerability Details
CVE IDCVE-2026-25690
BSIDBS-2026-GLOBAL-269829-M BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Published2026-05-12
Last Modified2026-05-18
ICS Relevance55%
Weakness (CWE)
CWE-88
Domains
NETWORK-INFRA
SourceNVD
Official Description

An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0 through 5.3.3, FortiDeceptor 5.2.0 through 5.2.1, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions may allow an authenticated attacker with at least read-only admin permission to read log files via HTTP crafted requests.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The attack vector involves an authenticated attacker sending specially crafted HTTP requests to the FortiDeceptor web interface. The vulnerability is caused by the improper handling of argument delimiters in a command, leading to argument injection.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductFixed Version
Fortinet Fortideceptor —
Remediation
View Vendor Advisory →

Remediation Priority: MEDIUM

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: July 2026 | Threat Age: 74 Days
CISA KEVNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
SAGE Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hashb1f2411cf2b753eec2e11840108ebb80a27a498d68b37ddcb00f857b6bd4110746331c0733fcd01a5848412ee104a80b037125956ba47a9417a8fb9151a46b63
Related CVEs affecting Fortinet
CVE-2005-3057 10.0 The FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and ot... CVE-2024-47575 9.8 A missing authentication for critical function in FortiManager 7.6.0, FortiMa... CVE-2024-23109 9.8 An improper neutralization of special elements used in an os command ('os com... CVE-2024-23108 9.8 An improper neutralization of special elements used in an os command ('os com... CVE-2019-16153 9.8 A hard-coded password vulnerability in the Fortinet FortiSIEM database compon...
View all Fortinet CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider monitors 353,228 CVEs across ICS/OT vendors. SAGE-enriched alerts with virtual patches, NERC-CIP mapping, and PSIRT contacts delivered to your SIEM in minutes.

Join free →