CVE-2026-12164— Privilege Escalation in Fortra File Integrity Monitoring (FIM)
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Fortra | File Integrity Monitoring (FIM) | < 9.4.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-12164
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Privilege Escalation in Fortra File Integrity Monitoring (FIM)
Source: CVE Program / CVE List V5
Vulnerability Description
Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission relationships.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
特权授予不正确
Source: CVE Program / CVE List V5
Vulnerability Title
Fortra File Integrity Monitoring 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Fortra Fortra File Integrity Monitoring是Fortra公司的一款文件完整性监控软件。 Fortra File Integrity Monitoring 9.4.0之前版本存在权限许可和访问控制问题漏洞，该漏洞源于权限分配不当，可能导致用户权限提升。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Fortra | File Integrity Monitoring (FIM) | 0 ~ 9.4.0 | - |
II. Public POCs for CVE-2026-12164
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-12164
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same vendor: Fortra
- CVE-2026-12163
Stored XSS in Fortra File Integrity Monitoring (FIM) - CVE-2026-9863
Core Privileged Access Manager (BoKS) upgrade tooling comman - CVE-2026-9862
Core Privileged Access Manager (BoKS) autoregistration servi - CVE-2026-1089
User‑Controlled HTTP Header In Fortra's GoAnywhere MFT Allow - CVE-2026-0972
HTML Injection possible in system generated emails in Fortra
Same weakness: CWE-266
- CVE-2026-75910
Incorrect privilege assignment in the Amazon aws-athena-quer - CVE-2026-66682
WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4. - CVE-2025-15689
WordPress Capella theme <= 2.5.5 - Privilege Escalation vuln - CVE-2026-11861
Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating - CVE-2026-73390
WordPress Total Donations plugin <= 2.0.5 - Privilege Escala
V. Comments for CVE-2026-12164
No comments yet