SSRF flaws reported in Fortinet FortiSIEM GUI and Cisco Finesse management interface
VULNERABILITYCiscoredteam/daily · 2 sources
- Severity
- High
- Sources
- 2
What happened
Fortinet has published an advisory for a server-side request forgery flaw in the FortiSIEM GUI, scored CVSSv3 3.8, which lets an authenticated attacker send crafted HTTP requests that originate from the device. Separately, CVE-2026-20362 affects the web-based management interface of Cisco Finesse, where an unauthenticated remote attacker can use crafted HTTP requests to obtain limited sensitive information from associated services (CVSS v3.1 7.2, High). The Cisco issue was found by Horizon3 researchers.
For IT people · Written by AI from 2 sources · Wrong?
What to do
- Check whether you use the affected product, and install the vendor’s fix when it is available. Open your watchlist
General advice for this kind of story
Full story timeline · 2 updates
Who reported · 2 outlets
Fortinet PSIRT AdvisoriesHorizon3.ai
Who and what is in it
Companies