← Back to browse · API

CVE-2025-64155

Severity
CRITICAL
CVSS
9.4
EPSS
0.42649
Risk score
52.53
CISA KEV
No
PoC
No
Published
2026-01-13
Modified
2026-02-26
First seen
2026-08-06
Aliases
CNVD-2026-14607, EUVD-2026-2076, GHSA-GVHH-FVM4-VQQJ
Products
Fortinet FortiSIEM 7.4.0, Fortinet FortiSIEM >=6.7.0，<7.1.9, Fortinet FortiSIEM >=7.2.0，<7.2.7, Fortinet FortiSIEM >=7.3.0，<7.3.5, Fortinet:FortiSIEM 6.7.10, Fortinet:FortiSIEM 7.0.4, Fortinet:FortiSIEM 7.1.8, Fortinet:FortiSIEM 7.2.6, Fortinet:FortiSIEM 7.3.0 ≤7.3.4, Fortinet:FortiSIEM 7.4.0
Sources
cnvd CNVD-2026-14607
euvd EUVD-2026-2076

Description

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.1.0 through 7.1.8, FortiSIEM 7.0.0 through 7.0.4, FortiSIEM 6.7.0 through 6.7.10 may allow an attacker to execute unauthorized code or commands via crafted TCP requests.

References