EUVD-2026-76098
GHSA-g584-wqjw-m2r8
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-540 sensitive-info exposure is confidentiality-driven; downstream access-control bypass yields limited integrity impact (I:L) and no availability impact, so C:H/I:H/A:H is overstated.
Primary rating from Vendor (fortinet).
CVSS VectorVendor: fortinet
Lifecycle Timeline
5DescriptionCVE.org
A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may allow attacker to improper access control via <insert attack vector here>
Articles & Coverage 1
AnalysisAI
Sensitive information embedded in the source code of Fortinet FortiMonitorOnSight (7.2.0-7.2.2 and 7.2.4-7.2.7) can be recovered by an attacker and leveraged to bypass access controls. The exposed data (CWE-540) may include credentials, keys, or other secrets that grant unauthorized access to protected functionality. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the target to be running FortiMonitorOnSight 7.2.0-7.2.2 or 7.2.4-7.2.7, and hinges on the attacker being able to access the source code or client-side code that contains the embedded sensitive information; the specific attack vector is NOT stated in the CVE (the description literally contains an '<insert attack vector here>' placeholder), so whether network reachability of a management endpoint or possession of a distributed artifact is the true prerequisite cannot be confirmed from the provided data. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The input assigns CVSS 9.8 (AV:N/AC:L/PR:N/UI:N/C:H/I:H/A:H), which is difficult to reconcile with a CWE-540 sensitive-information-in-source-code weakness: such flaws are typically confidentiality-driven, and the full I:H/A:H impact appears overstated absent a described mechanism to modify data or degrade availability. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult Fortinet PSIRT advisory FG-IR-26-170 (https://fortiguard.fortinet.com/psirt/FG-IR-26-170) and upgrade to the fixed FortiMonitorOnSight build it specifies; the input data does not include an exact patched version number, so treat the advisory as the source of the fix version rather than inventing one - Patch available per vendor advisory. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Identify all FortiMonitorOnSight deployments running versions 7.2.0-7.2.7 and map their network exposure; contact Fortinet support immediately for patch status and expected timeline. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today