Missing authorization in FortiSIEM - CVE-2026-106176
Published: October 14, 2026
Vulnerability identifier: #VU155704
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-106176
CWE-ID: CWE-862
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote privileged user to manipulate or delete data.
The vulnerability exists due to missing authorization. An authenticated attacker can execute unauthorized code or commands via Specially crafted HTTP requests.
Affected software
FortiSIEM
How to mitigate CVE-2026-106176
Install update from vendor's website.