News
cybersecurity The Internet goes on high alert after discovery of 8 compromised TLS certs - Ars Technica Security cybersecurity Zeabur shutting down after second security breach in two months - BleepingComputer cybersecurity Ex-OpenAI Engineer Held Over Secret Recorder, Saudi Ties - Dark Reading vulnerability VU#645818: Xerj Console API Authentication Bypass Leads to Unauthorized Credential Minting - CERT/CC Vulnerability Notes cybersecurity 5 Ways American SOCs and MSSPs Can Stay Ahead of Ransomware Threats - CyberPress cybersecurity US Agencies Detail Incident Response Practices for Rogue AI Agents - SecurityWeek cybersecurity Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution - The Hacker News cybersecurity Close Identity Gaps in Software Development Before Unleashing AI - Dark Reading cybersecurity Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA - The Hacker News ai The new economics of enterprise AI - MIT Technology Review cybersecurity Scammers Impersonate Poshmark Through Trusted Payment Emails to Steal Card Details and OTPs - CyberPress cybersecurity Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack Spree - Dark Reading cybersecurity Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites - The Hacker News cybersecurity AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign - SecurityWeek cybersecurity Hacker gets 8 years for stealing $3.3 million from taxpayers - BleepingComputer
1 / 15
All news ›
Cybersecurity

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

The Hacker News ·

Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially

Continue on The Hacker News ↗ ‹ All news Get the newsletter

The summary and image come from The Hacker News; the image is shown from their website.