Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

A critical security flaw in Fortinet FortiSIEM has been found to be vulnerable to unauthenticated remote code execution. The vulnerability is a path traversal flaw that could allow an attacker to execute unauthorized code or commands. A proof-of-concept exploit has been released by cybersecurity researchers, demonstrating the potential for arbitrary code execution. The flaw has a CVSS score of 9.4, indicating a high level of severity. It has been assigned the identifier CVE-2026-106173 and has recently been patched by Fortinet. The release of the proof-of-concept exploit highlights the potential risk of this vulnerability.