news.mlab.sh
Back to the feed
vulnerability

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

HighCVSS 9.8
Image: The Hacker News
Summary

A critical vulnerability (CVE-2026-106173) in Fortinet FortiSIEM allows unauthenticated attackers to overwrite files outside of the intended directory via a path traversal exploit. The exploit leverages a combination of path traversal and NUL byte injection to achieve file system control.

Read the full article at The Hacker News
Add news.mlab.sh as a preferred source on Google

Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data

Report an error
Confirmed errors are fixed and listed on /corrections.