CVE-2026-70467

Summary

A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all versions, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>

Affected Software

VendorProductVersion RangeStatus
FortinetFortiSIEM7.5.0affected
FortinetFortiSIEM7.4.0 <= 7.4.2affected
FortinetFortiSIEM7.3.0 <= 7.3.5affected
FortinetFortiSIEM7.2.0 <= 7.2.7affected
FortinetFortiSIEM7.1.0 <= 7.1.9affected
FortinetFortiSIEM7.0.0 <= 7.0.4affected
FortinetFortiSIEM6.7.0 <= 6.7.10affected
FortinetFortiSIEM6.6.0 <= 6.6.5affected
FortinetFortiSIEM6.5.0 <= 6.5.3affected
FortinetFortiSIEM6.4.1 <= 6.4.4affected

Weaknesses

  • CWE-918: Execute unauthorized code or commands

References