{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-84389", "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "state": "PUBLISHED", "assignerShortName": "fortinet", "dateReserved": "2026-09-01T16:36:09.518Z", "datePublished": "2026-09-08T16:41:45.842Z", "dateUpdated": "2026-09-10T03:56:51.064Z"}, "containers": {"cna": {"affected": [{"vendor": "Fortinet", "product": "FortiSIEM", "cpes": ["cpe:2.3:a:fortinet:fortisiem:7.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisiem:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisiem:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortisiem:7.4.1:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"versionType": "semver", "version": "7.5.0", "lessThanOrEqual": "7.5.1", "status": "affected"}, {"versionType": "semver", "version": "7.4.1", "lessThanOrEqual": "7.4.2", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via <insert attack vector here>"}], "providerMetadata": {"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "shortName": "fortinet", "dateUpdated": "2026-09-08T16:41:45.842Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-601", "description": "Execute unauthorized code or commands", "type": "CWE"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 2.8, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}}], "solutions": [{"lang": "en", "value": "Upgrade to upcoming  FortiSIEM version 7.6.0 or above\nUpgrade to upcoming  FortiSIEM version 7.5.2 or above"}], "references": [{"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-169", "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-169"}], "x_gcve": [{"vulnId": "CVE-2026-84389", "recordType": "advisory"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-09T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-84389"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-10T03:56:51.064Z"}}]}, "vulnerability-lookup:meta": {"epss": {"cve": "CVE-2026-84389", "date": "2026-10-05", "epss": "0.00218", "percentile": "0.11117"}, "nvd": "{\"cve\":{\"id\":\"CVE-2026-84389\",\"sourceIdentifier\":\"psirt@fortinet.com\",\"published\":\"2026-09-08T17:18:37.410\",\"lastModified\":\"2026-09-10T04:18:17.983\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via <insert attack vector here>\"}],\"affected\":[{\"source\":\"psirt@fortinet.com\",\"affectedData\":[{\"vendor\":\"Fortinet\",\"product\":\"FortiSIEM\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:2.3:a:fortinet:fortisiem:7.5.1:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortisiem:7.5.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortisiem:7.4.2:*:*:*:*:*:*:*\",\"cpe:2.3:a:fortinet:fortisiem:7.4.1:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"7.5.0\",\"lessThanOrEqual\":\"7.5.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.4.1\",\"lessThanOrEqual\":\"7.4.2\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@fortinet.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N\",\"baseScore\":3.1,\"baseSeverity\":\"LOW\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.6,\"impactScore\":1.4}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-09-09T00:00:00+00:00\",\"id\":\"CVE-2026-84389\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"psirt@fortinet.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-601\"}]}],\"references\":[{\"url\":\"https://fortiguard.fortinet.com/psirt/FG-IR-26-169\",\"source\":\"psirt@fortinet.com\"}]}}", "vulnrichment": {"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-84389\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-09-08T17:38:53.233356Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-09-08T17:39:12.425Z\"}}], \"cna\": {\"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 2.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"LOW\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:fortinet:fortisiem:7.5.1:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortisiem:7.5.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortisiem:7.4.2:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortisiem:7.4.1:*:*:*:*:*:*:*\"], \"vendor\": \"Fortinet\", \"product\": \"FortiSIEM\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.5.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.5.1\"}, {\"status\": \"affected\", \"version\": \"7.4.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.4.2\"}], \"defaultStatus\": \"unaffected\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Upgrade to upcoming  FortiSIEM version 7.6.0 or above\\nUpgrade to upcoming  FortiSIEM version 7.5.2 or above\"}], \"references\": [{\"url\": \"https://fortiguard.fortinet.com/psirt/FG-IR-26-169\", \"name\": \"https://fortiguard.fortinet.com/psirt/FG-IR-26-169\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via <insert attack vector here>\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-601\", \"description\": \"Execute unauthorized code or commands\"}]}], \"providerMetadata\": {\"orgId\": \"6abe59d8-c742-4dff-8ce8-9b0ca1073da8\", \"shortName\": \"fortinet\", \"dateUpdated\": \"2026-09-08T16:41:45.842Z\"}}}", "cveMetadata": "{\"cveId\": \"CVE-2026-84389\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-10T03:56:51.064Z\", \"dateReserved\": \"2026-09-01T16:36:09.518Z\", \"assignerOrgId\": \"6abe59d8-c742-4dff-8ce8-9b0ca1073da8\", \"datePublished\": \"2026-09-08T16:41:45.842Z\", \"assignerShortName\": \"fortinet\"}", "dataType": "CVE_RECORD", "dataVersion": "5.2"}}}