CVE-2026-106176
Received Received - Intake

Missing Authorization in Fortinet FortiSIEM 7.5.0

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: Fortinet, Inc.

Description
A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-13
Generated
2026-10-13
AI Q&A
2026-10-13
EPSS Evaluated
N/A
NVD
CVE-2026-106176
EUVD
EUVD-2026-98967

Affected Vendors & Products

Showing 10 associated CPEs
Vendor Product Version / Range
Fortinet FortiSIEM 7.5.0
Fortinet FortiSIEM 7.4.0
Fortinet FortiSIEM 7.3.0
Fortinet FortiSIEM 7.2.0
Fortinet FortiSIEM 7.1.0
Fortinet FortiSIEM 7.0.0
Fortinet FortiSIEM 6.7.0
Fortinet FortiSIEM 6.6.0
Fortinet FortiSIEM 6.5.0
Fortinet FortiSIEM 6.4.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a missing authorization issue in Fortinet FortiSIEM version 7.5.0. It allows an attacker to execute unauthorized code or commands by sending specially crafted HTTP requests.

Impact Analysis

An attacker could exploit this to run unauthorized commands on the affected system, potentially leading to data breaches, system compromise, or unauthorized access to sensitive information.

Compliance Impact

This vulnerability could lead to unauthorized access or data exposure, which may violate compliance requirements such as GDPR or HIPAA, potentially resulting in legal penalties or loss of certification.

Mitigation Strategies

Apply the latest security patches from Fortinet immediately. Monitor network traffic for unusual HTTP requests targeting FortiSIEM. Restrict access to FortiSIEM administrative interfaces to trusted IPs only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-106176. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart