CVE-2026-84389

A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via <insert attack vector here>

Scoring

Severity

LOW

CVSS base score

2.8

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C

CWE

CWE-601

Published

2026-09-08

Last modified

2026-09-08

Affected products

• Fortinet FortiSIEM
• Fortinet FortiSIEM

Weakness type

• CWE-601

Related vulnerabilities

• CVE-2026-86756 — Snipe-IT 8.5.0 through 8.6.3 Open Redirect via SAML RelayState
• CVE-2026-78377 — Open Redirect in Yordam Informatics's Library Automation System
• CVE-2026-86351 — MISP User Homepage Validation Allows Authenticated Open Redirect via Protocol-Relative URL
• CVE-2026-86256 — wger before 2.6 Open Redirect via trainer-login next parameter
• CVE-2026-86205 — h3 before 2.0.1-rc.18 Open Redirect via redirectBack()
• CVE-2026-85676 — Dub Open Redirect via Unrestricted redir_url Parameter
• CVE-2026-53728 — Medplum - Improper Validation of Redirect URI in External Auth Callback allows Authorization Code Leakage
• CVE-2026-49456 — Waku: Open Redirect via `unstable_redirect` Helper

Markdown version · Browse all CVEs