Security · Updated 20 Oct, 09:08 pm IST
PoC released for critical FortiSIEM flaw enabling unauthenticated remote code execution
Why it matters for readers: A public exploit means the vulnerability is easier for attackers to try, so check if affected systems have been updated.
- A proof-of-concept exploit for a critical FortiSIEM vulnerability has been released by cybersecurity researchers.1
- The vulnerability is tracked as CVE-2026-106173 and carries a CVSS score of 9.4.1
- The flaw is a path traversal issue that could let an unauthenticated attacker execute arbitrary code or commands.1
- The issue was recently patched by Fortinet, but the public PoC raises the risk of exploitation against unpatched systems.1
Get a brief like this every morning
Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.
Get started