A missing authorization weakness in Fortinet FortiSIEM allows attackers to craft HTTP requests that run code or commands without proper privileges. The vulnerability, identified as CWE-862, enables unauthorized code execution and elevates an attacker from an unauthenticated or low‑privileged user to full system control. This flaw directly compromises confidentiality, integrity, and availability of the affected instance.

The flaw affects all Fortinet FortiSIEM releases from 6.4.0 through 7.5.1, inclusive. Vendors and customers using any of these product builds are potentially exposed until a patch or configuration change is applied.

The CVSS score is 3.4, indicating a low severity baseline, and EPSS is not available, suggesting limited public exploitation data. The vulnerability is not listed in CISA KEV, implying no known active exploitation. Attackers likely target the public HTTP interface of FortiSIEM; they must send specially crafted requests to trigger code execution, inferring that the attack vector is network‑based and requires the ability to reach the management API.