Vulnerabilidades do Fortinet Fortisiem

CVE-2026-106176 Baixa · 3.8 CWE-862 13/10/2026

A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute...

A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests

CVE-2026-106173 Crítica · 9.8 CWE-22 13/10/2026

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in...

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.

CVE-2026-84389 Baixa · 3.1 CWE-601 08/09/2026

Open Redirect em Fortinet Fortisiem

A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via <insert attack vector here>

CVE-2026-70467 Baixa · 3.8 CWE-918 12/08/2026

Server-Side Request Forgery (SSRF) em Fortinet Fortisiem

A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all versions, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>

CVE-2026-59838 Média · 4.8 CWE-80 15/07/2026

A improper neutralization of script-related html tags in a web page (basic xss)…

A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.2.0 through 7.2.6, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions, FortiSIEM 6.4 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>

CVE-2026-59841 Alta · 7.5 CWE-923 14/07/2026

A improper restriction of communication channel to intended endpoints vulnerability in…

A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via <insert attack vector here>

CVE-2026-25972 Média · 6.1 CWE-79 10/03/2026

Cross-site Scripting (XSS) em Fortinet Fortisiem

An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4 may allow a remote unauthenticated attacker to provide arbitrary data enabling a social engineering attack via spoofed URL parameters.

CVE-2025-64155 Crítica · 9.8 CWE-78 13/01/2026

OS Command Injection em Fortinet Fortisiem

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.1.0 through 7.1.8, FortiSIEM 7.0.0 through 7.0.4, FortiSIEM 6.7.0 through 6.7.10 may allow an attacker to execute unauthorized code or commands via crafted TCP requests.

CVE-2025-58324 Média · 4.8 CWE-79 14/10/2025

Cross-site Scripting (XSS) em Fortinet Fortisiem

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSIEM 7.2.0 through 7.2.2, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an authenticated attacker to perform a stored cross site scripting (XSS) attack via crafted HTTP requests.