Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

AI Summary

A public proof-of-concept exploit has been released for CVE-2026-106173 (CVSS 9.4), a critical path traversal vulnerability in Fortinet FortiSIEM that allows unauthenticated remote code execution. The availability of a working PoC dramatically increases exploitation risk for organizations running unpatched FortiSIEM instances. Security teams should apply Fortinet's patch immediately and review FortiSIEM exposure.

Read full article → https://thehackernews.com/2026/10/critical-fortisi…

Relevance score: 85.0/100

# More from October 21

1
PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert The Hacker News
2
Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader The Hacker News
3
Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software The Hacker News
4
Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA The Hacker News
6
AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign SecurityWeek
7
Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death Graham Cluley
8
Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware The Hacker News
9
Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election The Hacker News
10
ConnectWise customers hit by supply-chain attack linked to compromised API secret CyberScoop