{"id":"CVE-2026-106176","title":"A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests","summary":"A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests","severity":"low","cvss":3.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","cwe":["CWE-862"],"published":"2026-10-13","updated":"2026-10-14","sourceUpdated":"2026-10-14T16:04:11.750","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-106176","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-183","label":"psirt@fortinet.com"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-10-13T18:41:42.737Z","vendor":"Fortinet","product":"FortiSIEM","affected":["FortiSIEM >= 7.5.0 <= 7.5.1","FortiSIEM >= 7.4.0 <= 7.4.2","FortiSIEM >= 7.3.0 <= 7.3.5","FortiSIEM >= 7.2.0 <= 7.2.7","FortiSIEM >= 7.1.0 <= 7.1.9","FortiSIEM >= 7.0.0 <= 7.0.4","FortiSIEM >= 6.7.0 <= 6.7.10","FortiSIEM >= 6.6.0 <= 6.6.5","FortiSIEM >= 6.5.0 <= 6.5.3","FortiSIEM >= 6.4.0 <= 6.4.4"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-14T03:59:55.857050Z"},"scores":{"nvd":3.8,"cna":3.4},"epss":0.00213,"epssPercentile":0.11542,"slug":"CVE-2026-106176","body":"## Overview\n\nA missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":21,"depthScoreParts":{"impact":20.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}