CVE-2026-25972

An improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4 may allow a remote unauthenticated attacker to provide arbitrary data enabling a social engineering attack via spoofed URL parameters...

CVE-2026-25972

Fortinet FortiSIEM versions 7.3.0–7.3.4 and 7.4.0 have an improper neutralization of input during web page generation that enables cross-site scripting. An unauthenticated remote attacker can supply arbitrary data via spoofed URL parameters to perform a social engineering attack via the UI. CVSSv...

Fortinet FortiSIEM 跨站脚本漏洞

Fortinet FortiSIEM is a security information and event management system developed by the American company Fortinet. This system includes features such as asset discovery, workflow automation, and unified management. Versions of Fortinet FortiSIEM ranging from 7.3.0 to 7.3.4 contain a cross-site...

⚡ Weekly Recap: Fortinet Exploits, RedLine Clipjack, NTLM Crack, Copilot Attack & More

In cybersecurity, the line between a normal update and a serious incident keeps getting thinner. Systems that once felt reliable are now under pressure from constant change. New AI tools, connected devices, and automated systems quietly create more ways in, often faster than security teams can...

Exploit for CVE-2025-64155

CVE-2025-64155: Fortinet FortiSIEM Argument Injection to Remot...

CVE-2022-26119

A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password...

CVE-2019-16153

A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials...

EUVD-2019-7959

Malware in sbrugna...

EUVD-2023-45277

Malicious code in bioql PyPI...

EUVD-2024-42207

Malicious code in bioql PyPI...

EUVD-2021-28175

Malicious code in bioql PyPI...

EUVD-2021-28176

Malicious code in bioql PyPI...

EUVD-2022-30686

Malicious code in bioql PyPI...

EUVD-2023-40500

Malicious code in bioql PyPI...

EUVD-2022-46919

Malicious code in bioql PyPI...

EUVD-2023-40498

Malicious code in bioql PyPI...

EUVD-2024-20634

Malicious code in bioql PyPI...

EUVD-2023-45268

Malicious code in bioql PyPI...

Exploit for OS Command Injection in Fortinet Fortisiem

CVE-2025-25256 - Fortinet FortiSIEM Vulnerability Overview...

Fortinet FortiSIEM Operating System Command Injection Vulnerability (CNVD-2025-21176)

Fortinet FortiSIEM is a suite of security information and event management systems from the American company Fiat Fortinet. The system includes features such as asset discovery, workflow automation and unified management. Fortinet FortiSIEM has an operating system command injection vulnerability,...