All vulnerabilities
CVE-2026-106176

A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests

Fortinet FortiSIEMNetwork & edge
Open in ThreatlineRecord JSON
CVSS
3.4Low
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.21%Chance of exploitation activity in the next 30 days, higher than 11% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published13 Oct 2026Updated 14 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Affected versions 10

  • FortiSIEMaffected: 7.5.0 through 7.5.1CVE List
  • FortiSIEMaffected: 7.4.0 through 7.4.2CVE List
  • FortiSIEMaffected: 7.3.0 through 7.3.5CVE List
  • FortiSIEMaffected: 7.2.0 through 7.2.7CVE List
  • FortiSIEMaffected: 7.1.0 through 7.1.9CVE List
  • FortiSIEMaffected: 7.0.0 through 7.0.4CVE List
  • FortiSIEMaffected: 6.7.0 through 6.7.10CVE List
  • FortiSIEMaffected: 6.6.0 through 6.6.5CVE List
  • FortiSIEMaffected: 6.5.0 through 6.5.3CVE List
  • FortiSIEMaffected: 6.4.0 through 6.4.4CVE List

References 1