The vulnerability identified as CVE-2026-16467 in Dolusoft Software Technologies Fortilogger is classified under CWE-862 (Missing Authorization). It allows an attacker to access functionality that is not properly restricted by ACLs, potentially leading to unauthorized access to sensitive operations or data. The affected versions are all Fortilogger releases prior to 6.1.5.9. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) indicates that the vulnerability is remotely exploitable over the network with low attack complexity, requires no privileges or user interaction, and results in a high impact on confidentiality without affecting integrity or availability. There is no vendor advisory or patch information currently available, and no known exploits in the wild have been reported.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to access sensitive functionality within Fortilogger that should be protected by authorization controls. This may lead to unauthorized disclosure of sensitive information, as indicated by the high confidentiality impact in the CVSS score. There is no indication of impact on integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting network access to Fortilogger instances and monitor for unusual access patterns. No official remediation or temporary fixes have been published by the vendor at this time.