Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
20 October 2026
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution.
The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially