Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

Security researchers have released a proof-of-concept exploit for a patched critical flaw in Fortinet FortiSIEM that could allow unauthenticated remote code execution, The Hacker News reports. The vulnerability, tracked as CVE-2026-106173 with a CVSS score of 9.4, is a path traversal issue.