CYBERSECURITYTRACKER
Permanent story citation

NCSC-2026-0434 Vulnerabilities fixed in Fortinet FortiSIEM

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10478

As cited

Copy frozen at (site build).

vulnerabilities

NCSC-2026-0434 Vulnerabilities fixed in Fortinet FortiSIEM

Fortinet patched two vulnerabilities in FortiSIEM version 7.5.0: a path traversal flaw allowing unauthenticated remote code execution (RCE) and a missing authorization check in the GUI enabling authenticated users to bypass controls and achieve RCE. Both flaws can compromise system integrity and security.

Why it matters: Organizations running FortiSIEM must apply the patch immediately to prevent unauthenticated attackers from executing arbitrary commands and compromising their security information and event management (SIEM) infrastructure.

VendorsFortinet
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary