CVE-2026-106176: Low severity Fortinet FortiSIEM vulnerability
A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The vulnerability requires high privileges (PR:H). It is not described as exploitable by an unauthenticated or low-privileged remote attacker.
Does exploitation require user interaction or a complex attack path?
No user interaction is required (UI:N), and the attack complexity is rated low (AC:L). The issue is reachable over the network through specially crafted HTTP requests.
What is the potential impact if exploitation succeeds?
Successful exploitation may allow unauthorized code or command execution. The listed impact affects integrity and availability, while confidentiality impact is rated none.
Which FortiSIEM release is identified as affected?
The provided information identifies Fortinet FortiSIEM 7.5.0. No other affected or fixed versions are specified.