Critical Path Traversal Vulnerability in Fortinet FortiSIEM Allows Unauthenticated RCE

Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a critical path traversal vulnerability (CVE-2026-106173, CVSS 9.4) in Fortinet FortiSIEM, enabling unauthenticated remote code execution. The flaw underscores urgent mitigation efforts to prevent exploitation.

Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution.

The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially

Read original article