Ce mail provient de l'extérieur, restons vigilants

=====================================================================


                            CERT-Renater

                Note d'Information No. 2026/VULN1017
_____________________________________________________________________

DATE                : 14/10/2026

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running FortiSIEM versions prior to 7.5.1.

====================================================================
https://fortiguard.fortinet.com/psirt/FG-IR-26-180
_____________________________________________________________________

Arbitrary file write in grpc phQueryMaster


Summary

An Improper limitation of a pathname to a restricted directory
('path traversal') [CWE-22] in FortiSIEM may allow an unauthenticated
attacker to execute unauthorized code or commands via specially
crafted packets.


Version           Affected      Solution

FortiSIEM 7.6        Not affected    Not Applicable
FortiSIEM 7.5   7.5.0           Upgrade to 7.5.1 or above


Workaround :
- Restricting access on tcp port 27918 prevents the issue.

FortiSIEM Cloud is NOT affected by this vulnerability.


Acknowledgement
Internally discovered and reported by Gwendal Guégniaud of
Fortinet Product Security team.


Virtual Patch
No

Timeline
2026-10-13: Initial publication

=========================================================
+ CERT-RENATER        |    tel : 01-53-94-20-44         +
+ 23/25 Rue Daviel    |    fax : 01-53-94-20-41         +
+ 75013 Paris         |   email:cert@support.renater.fr +
=========================================================