Skip to content
NewA calmer, faster ZeroHour
Advisorylow

Server-Side Request Forgery (SSRF)

Fortinet PSIRT ()2 · 1 read
Read at fortiguard.fortinet.com
AI summary · glm-5.3-flashSummaries by Vani AI

Fortinet discloses a low-severity SSRF in the FortiSIEM GUI allowing authenticated attackers to send requests from targeted devices.

Fortinet PSIRT advisory FG-IR-26-159, revised 2026-08-12, describes a server-side request forgery (CWE-918) in the FortiSIEM GUI, scored CVSSv3 3.4. An authenticated attacker can send HTTP requests originating from the targeted device via specially crafted requests, potentially enabling internal network probing. No CVE identifier or exploitation status is included in the advisory text.

Key facts
  • SSRF (CWE-918) in the FortiSIEM GUI
  • Authenticated attacker can send HTTP requests from the targeted device
  • CVSSv3 score 3.4
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
cwe-918fortinetfortisiemssrf
Vendors
Fortinet
Products
FortiSIEM
Organizations
Fortinet PSIRT

From the original article

CVSSv3 Score: 3. 4 A Server-Side request forgery (SSRF) [CWE-918] vulnerability in FortiSIEM GUI may allow an authenticated attacker to send HTTP requests originating from the targeted device via specially crafted HTTP requests Revised on 2026-08-12 00:00:00

Fortinet PSIRT

fortiguard.fortinet.com

Read the full article at Fortinet PSIRT

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.