FORTINETVERIFIED
Supers override fails to properly override supervisor address
Checked 8 Oct 2026. BlackTree preserves the last verified facts if a later source check is temporarily unavailable.
Open the official publisher source
← Lifecycle catalogue
SECURITY ADVISORYFORTINETVERIFIED
PUBLISHER UPDATE · FORTINET-PRODUCTS-DCB64474FEA68661
FORTINET-PRODUCTS-DCB64474FEA68661 release notes and known issues
Supers override fails to properly override supervisor address
Scope: Fortinet products. This update record adds version, fix and known-issue context. Its publication date is not a lifecycle boundary.
Summary
CVSSv3 Score: 6.9 An Improper Restriction of Communication Channel to Intended Endpoints [CWE-923] vulnerability in FortiSIEM Windows Agent may allow an unauthorized attacker on the same local network to execute arbitrary code via spoofing the supervisors hostname when the Windows device is configured with the 'Supers Override' feature. Revised on 2026-07-14 00:00:00
Improvements and security content
- CVSSv3 Score: 6.9 An Improper Restriction of Communication Channel to Intended Endpoints [CWE-923] vulnerability in FortiSIEM Windows Agent may allow an unauthorized attacker on the same local network to execute arbitrary code via spoofing the supervisors hostname when the Windows device is configured with the 'Supers Override' feature. Revised on 2026-07-14 00:00:00
Known issues
Publisher statementNot stated. The verified publisher record does not contain a known-issues statement.
Affected products and versions
Products
- Fortinet products
Affected versions
- 6.9
Fixed versions or updates
- No fixed version is stated in this record.
Recommended action
Review the official publisher document before deployment.