Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

vulnerability

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

A critical vulnerability (CVE-2026-106173) in Fortinet FortiSIEM allows unauthenticated attackers to overwrite files outside of the intended directory via a path traversal exploit. The exploit leverages a combination of…

The Hacker News · Oct 20, 2026 HighCVSS 9.8

CVE-2026-106173 vulnerability path traversal remote code execution

vulnerability

PHP2Shell exploit bypasses protections designed to stop remote code execution

Researchers at VulnCheck have developed a new exploit that bypasses ASLR protections, allowing them to achieve remote code execution on PHP systems, even with production configurations in place.

The Register · 5d ago HighCVSS 9.8

CVE-2026-109618 CVE-2026-109619 php aslr remote code execution

news.mlab.sh

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

PHP2Shell exploit bypasses protections designed to stop remote code execution