2.8 Low

CVE-2026-84389 A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM…

Description

A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via <insert attack vector here>

CVSS 3.1 detail

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C

Exploitable remotely over the network, without an account and if a user takes an action; the impact on data or service is limited.

Attack vector: Network
Attack complexity: High
Privileges required: None
Interaction: Required
Scope: Unchanged
Confidentiality: None
Integrity: Low
Availability: None

Affected products and versions

Product	Affected versions	Fixed in
FortiSIEM 7.5	7.5.0 → 7.5.1	No fix stated
FortiSIEM 7.4	7.4.1 → 7.4.2	No fix stated

References

fortiguard.fortinet.com fortiguard.fortinet.com

Timeline

Published September 8, 2026
Last modified November 3, 2026

The 26 CVEs of FortiSIEM →

CVE-2026-106173 A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM… 9.4 Critical CVE-2026-106176 A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or… 3.4 Low CVE-2026-70467 A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM… 3.4 Low CVE-2026-59838 A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM… 5.3 Medium

Track this CVE