Fortinet FortiSIEM vulnerabilities

CVEs per yearBy the year they were published

1. 20238
2. 20242
3. 20259
4. 20267

Newest CVEs

• CVE-2026-106173

  A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute…

  Fortinet · FortiSIEM

  Critical9.4
• CVE-2026-106176

  A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP…

  Fortinet · FortiSIEM

  Low3.4
• CVE-2026-84389

  A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker…

  Fortinet · FortiSIEM

  Low2.8
• CVE-2026-70467

  A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all…

  Fortinet · FortiSIEM

  Low3.4
• CVE-2026-59838

  A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4,…

  Fortinet · FortiSIEM

  Medium5.3
• CVE-2026-25972

  An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through…

  Fortinet · FortiSIEM

  Medium4.1
• CVE-2025-64155

  An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0…

  Fortinet · FortiSIEM

  Critical9.4
• CVE-2025-58324

  An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSIEM 7.2.0 through 7.2.2, 7.1 all versions, 7.0 all versions, 6.7…

  Fortinet · FortiSIEM

  Medium6.1
• CVE-2025-25256

  An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiSIEM 7.3.0…

  Fortinet · FortiSIEM

  Critical9.8
• CVE-2023-40714

  A relative path traversal in Fortinet FortiSIEM versions 7.0.0, 6.7.0 through 6.7.2, 6.6.0 through 6.6.3, 6.5.1, 6.5.0 allows attacker to escalate privilege…

  Fortinet · FortiSIEM

  Critical9.7