Skip to content
CVE PROGRAM SOURCE RECORD3.4 Low

CVE-2026-106176

A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests

Description

A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiSIEM

Default version status: unaffected

  • 7.5.0 to ≤ 7.5.1affected
  • 7.4.0 to ≤ 7.4.2affected
  • 7.3.0 to ≤ 7.3.5affected
  • 7.2.0 to ≤ 7.2.7affected
  • 7.1.0 to ≤ 7.1.9affected
  • 7.0.0 to ≤ 7.0.4affected
  • 6.7.0 to ≤ 6.7.10affected
  • 6.6.0 to ≤ 6.6.5affected
  • 6.5.0 to ≤ 6.5.3affected
  • 6.4.0 to ≤ 6.4.4affected

References