3.6
Low
CVE-2019-17659 A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated…
Description
A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated attacker to obtain SSH access to the supervisor as the restricted user "tunneluser" by leveraging knowledge of the private key from another installation or a firmware image.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiSIEM | 5.2.6 | No fix stated |
Other CVEs of FortiSIEM
The 26 CVEs of FortiSIEM →
CVE-2026-106173
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM…
9.4
Critical
CVE-2026-106176
A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or…
3.4
Low
CVE-2026-84389
A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM…
2.8
Low
CVE-2026-70467
A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM…
3.4
Low