CyberCVE

CVE-2026-106176

A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests

Severity
Low 3.4
CVSS 3.1
Remote, needs privileges or user interaction what this means
Exploited
Not listed
EPSS
0.002
10.8th percentile
Discovered by
Third party
Vendor advisory acknowledgement
Published
Oct 13, 2026
Assigned by fortinet

Description

A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests

Weakness: CWE-862

Affected products

Vendor Product Category Matched by
Fortinet FortiSIEM SIEM & Log Management cna-assigner
Vendor-reported products (1)
  • Fortinet · FortiSIEM

Credit

Discovered and Responsibly reported by external researcher khalooda0x - Khaled ibn Al-Walid.

Vendor remediation

Please refer to the Fortinet advisory for mitigation details.

References

Something wrong here?