🤖 CVE-2026-106173 (CVSS 9.4): unauthenticated RCE in Fortinet FortiSIEM via path traversal, patched but now with a public PoC exploit. Attackers can run arbitrary code or commands without credentials; unpatched internet-facing appliances remain the exposure.
🔗 https://thehackernews.com/2026/10/critical-fortisiem-flaw-gets-public.html
#CVE #Fortinet #RCE #Exploit #CyberSec
The Hacker NewsCritical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code ExecutionResearchers release a PoC for critical FortiSIEM flaw CVE-2026-106173, showing how unauthenticated attackers can achieve remote code execution.