SSRF flaws reported in Fortinet FortiSIEM GUI and Cisco Finesse management interface
- Severity
- High
- Sources
- 2
What happened
The Fortinet advisory covers an SSRF [CWE-918] in the FortiSIEM GUI, CVSSv3 3.8, requiring authentication and allowing HTTP requests to originate from the targeted device; the advisory was revised on 2026-08-12. CVE-2026-20362 is an unauthenticated SSRF in the Cisco Finesse web-based management interface, CVSS v3.1 7.2 (High), exposing limited sensitive information from associated services, and was discovered by Horizon3 researchers including Noah King. The excerpts do not state affected versions, fixed releases or exploitation in the wild, so defenders should consult the vendor advisories for patch details and consider restricting access to the management interfaces.
For security analysts · Written by AI from 2 sources · Wrong?
What to do
- Check whether you use the affected product, and install the vendor’s fix when it is available. Open your watchlist
General advice for this kind of story