The vulnerability is an instance of improper neutralization of special elements used in a SQL command (CWE‑89) that allows a low‑privileged user to craft requests resulting in arbitrary command execution. This flaw could compromise confidentiality, integrity, or availability of the affected system and may ultimately permit the attacker to execute code or manipulate data without needing to gain elevated privileges.

Affected vendors include Fortinet products: FortiAnalyzer, FortiAnalyzer Cloud, and FortiManager. The specific affected versions are FortiAnalyzer 7.6.0–7.6.2 and 7.4.1–7.4.6; FortiAnalyzer Cloud 7.6.2, 7.4.1–7.4.6, and 7.2.1–7.2.9; and FortiManager 7.6.0–7.6.2 and 7.4.0–7.4.6.

The CVSS score of 5.9 indicates a moderate severity, and an EPSS score of < 1% reflects a low but non‑zero probability of exploitation. The flaw is not listed in the CISA KEV catalog. Attackers likely need authenticated access through the web interface or API, but the required user role is low privilege, making the attack moderately feasible. Overall risk is moderate, with significant impact should an attacker succeed.