A vulnerability categorized as critical has been discovered in Fortinet FortiNDR up to 7.0.7/7.1.1/7.2.5/7.4.9/7.6.2. Affected is an unknown function of the component HTTP Handler. The manipulation results in sql injection.

This vulnerability is reported as CVE-2026-25088. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.