CVE-2022-26119: Fortinet Fortisiem

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password.

Affected products

• Fortinet Fortisiem: from 5.1.0, up to and including 5.1.3; from 5.2.5, up to and including 5.2.8; from 5.3.0, up to and including 5.3.3; from 6.1.0, up to and including 6.1.2; from 6.3.0, up to and including 6.3.3; version 5.0.0 only; …

Published 2022-11-02. Last modified 2026-06-17.