CVE-2026-12164: medium-severity vulnerability in Fortra File Integrity Monitoring (FIM)
Privilege Escalation in Fortra File Integrity Monitoring (FIM)
Published · Updated
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.4epss 0.1%
exploitation probability
0.1%top 97% of all CVEs
observed exploitation
nono source reports it
Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission relationships.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Affected products
Fortra · File Integrity Monitoring (FIM)Related CVEs — Fortra File Integrity Monitoring (FIM)
In the same product, most dangerous first.