CVE-2026-25972

Name of the Vulnerable Software and Affected Versions Fortinet FortiSIEM versions 7.3.0 through 7.3.4 Fortinet FortiSIEM version 7.4.0

Description The software contains a flaw related to improper neutralization of input during web page generation, which can lead to cross-site scripting. A remote, unauthenticated attacker may be able to provide arbitrary data, potentially enabling a social engineering attack through manipulated URL parameters.

Recommendations Fortinet FortiSIEM versions 7.3.0 through 7.3.4 should be updated. Fortinet FortiSIEM version 7.4.0 should be updated.