Back to all news
Security

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

The Hacker News·October 20, 2026·1 min read
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

Researchers released a proof-of-concept exploit for a critical Fortinet FortiSIEM flaw, CVE-2026-106173 (CVSS 9.4), enabling unauthenticated remote code execution via path traversal. The vulnerability allows attackers to execute unauthorized code or commands through specially crafted requests. Fortinet patched the flaw, but the public PoC raises the risk of active exploitation, prompting urgent calls for organizations to apply the fix immediately.

Read at The Hacker News
Daily crypto arcade

Read the news, then play it.

Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.

Open ChainshortsGet it on the Solana dApp Store