EUVD-2026-60173
GHSA-35v8-xrx8-xcm9
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Network-accessible, no authentication required per USOM disclosure; confidentiality-only impact aligns with unauthorized read access via ACL bypass, no write or availability effect described.
Primary rating from Vendor (usom).
CVSS VectorVendor: usom
Lifecycle Timeline
3DescriptionCVE.org
Missing Authorization vulnerability in Dolusoft Software Technologies Fortilogger allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects Fortilogger: before 6.1.5.9.
AnalysisAI
Missing authorization in Dolusoft Software Technologies Fortilogger (before version 6.1.5.9) allows unauthenticated remote attackers to access functionality that should be restricted by access control lists. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms exploitation requires no authentication and no user interaction over the network, with a resulting high confidentiality impact. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions are required beyond network reachability to the Fortilogger application. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score of 7.5 reflects a high-severity finding driven by the fully unauthenticated network attack vector (AV:N/AC:L/PR:N/UI:N) and high confidentiality impact (C:H). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Fortilogger to version 6.1.5.9 or later, which is the vendor-confirmed fix version per the NVD entry. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: inventory all Fortilogger installations to identify systems running versions before 6.1.5.9 and isolate them from untrusted networks using firewall rules. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today