轉發 台灣電腦網路危機處理暨協調中心 資安訊息警訊 TWCERTCC-200-202610-00000016

[內容說明]
Fortinet 針對 FortiSIEM 發布重大資安漏洞公告(CVE-2026-106173，CVSS：9.8)。此漏洞可能允許未經身分驗證的攻擊者，透過精心設計的資料執行未經授權的程式碼或命令。

[影響平台]
FortiSIEM 7.5.0版本

[建議措施]
請將FortiSIEM 更新至 7.5.1(含)之後版本

[參考資料]
1. https://www.twcert.org.tw/tw/cp-169-11280-8bf6d-1.html
Forwarded from Taiwan Computer Emergency Response Team/Coordination Center Security Alert TWCERTCC-200-202610-00000016

[Description]
Fortinet has released a critical security vulnerability advisory for FortiSIEM (CVE-2026-106173, CVSS: 9.8). This vulnerability may allow unauthenticated attackers to execute unauthorized code or commands through specially crafted data.

[Affected Platforms]
FortiSIEM version 7.5.0

[Recommendations]
Please update FortiSIEM to version 7.5.1 or later

[References]
1. https://www.twcert.org.tw/tw/cp-169-11280-8bf6d-1.html