CVE-2025-48418

A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.10, FortiAnalyzer 7.0.0 through 7.0.14, FortiAnalyzer 6.4 all versions, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.10, FortiAnalyzer Cloud 7.0.1 through 7.0.14, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.6.0 through 7.6.3, FortiManager 7.4.0 through 7.4.7, FortiManager 7.2.0 through 7.2.10, FortiManager 7.0.0 through 7.0.14, FortiManager 6.4 all versions, FortiManager Cloud 7.6.2 through 7.6.3, FortiManager Cloud 7.4.1 through 7.4.7, FortiManager Cloud 7.2.1 through 7.2.10, FortiManager Cloud 7.0.1 through 7.0.14, FortiManager Cloud 6.4 all versions may allow a remote authenticated read-only admin with CLI access to escalate their privilege via use of a hidden command.

Scoring

Severity

MEDIUM

CVSS base score

6.4

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:W/RC:C

EPSS probability

0.52%

CWE

CWE-912

Published

2026-03-10

Last modified

2026-03-11

Affected products

• Fortinet FortiAnalyzer
• Fortinet FortiAnalyzer
• Fortinet FortiAnalyzer
• Fortinet FortiAnalyzer
• Fortinet FortiAnalyzer
• Fortinet FortiAnalyzer Cloud
• Fortinet FortiAnalyzer Cloud
• Fortinet FortiAnalyzer Cloud

Weakness type

• CWE-912

Related vulnerabilities

• CVE-2026-18844 — Pulsetto Vagus Nerve Stimulator Hidden Functionality
• CVE-2026-61515 — Puwell IP Camera 2.x - 4.x Unauthenticated Command Injection via DebugShell
• CVE-2026-18191 — Vacron｜IP Camera - Hidden Functionality
• CVE-2026-4769 — Unauthenticated Access to Internal Diagnostic Interface
• CVE-2026-7413 — Persistent undocumented backdoor access in Yarbo robot
• CVE-2026-41446 — WattBox 800 & 820 Series < 2.10.0.0 RCE via Diagnostic Endpoints
• CVE-2026-1952 — Denial of service via the undocumented subfunction in AS320T
• CVE-2026-34769 — Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference

Markdown version · Browse all CVEs