Threat intel
Public PoC Exploit Released for Critical Unauthenticated RCE Flaw in Fortinet FortiSIEM
Researchers have released a proof-of-concept exploit for CVE-2026-106173, a critical path traversal vulnerability in Fortinet FortiSIEM with a CVSS score of 9.4 that could allow unauthenticated remote code execution, according to The Hacker News. The flaw has been patched.
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw affecting Fortinet FortiSIEM, The Hacker News reported.
The vulnerability, tracked as CVE-2026-106173, carries a CVSS score of 9.4. It is described as a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands on vulnerable systems.
FortiSIEM is Fortinet's security information and event management platform, used by enterprises and service providers to monitor networks, correlate events and detect threats. Because the flaw requires no authentication, the barrier to exploitation is low, and the public release of working exploit code typically accelerates scanning and attack attempts against exposed systems.
According to the report, Fortinet has already issued a fix for the vulnerability. Organizations running FortiSIEM are advised to apply the available patches as soon as possible and to confirm that management interfaces are not unnecessarily exposed to the internet.
The publication of exploit code for critical, unauthenticated remote code execution flaws has historically been followed by rapid in-the-wild exploitation. Security teams should prioritize patching internet-facing FortiSIEM deployments and review logs for signs of suspicious activity.
Details of the vulnerability and the exploit release come from The Hacker News.
Source: The Hacker News
