Open Redirect Vulnerability in Fortinet FortiSIEM Products
CVE-2026-84389

2.8LOW

Key Information:

Vendor

Fortinet
Status
Fortisiem
Vendor
CVE Published:
8 September 2026

What is CVE-2026-84389?

An open redirect vulnerability in Fortinet FortiSIEM versions 7.5.0 through 7.5.1 and 7.4.1 through 7.4.2 allows attackers to redirect users to untrusted sites. This flaw can be exploited to execute unauthorized commands or gain access to sensitive information, posing significant security risks to affected systems.

Affected Version(s)

FortiSIEM 7.5.0 <= 7.5.1

FortiSIEM 7.4.1 <= 7.4.2

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-169

CVSS V3.1

Score:
2.8
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.