CVE-2025-64155

CVE-2025-64155: Fortinet FortiSIEM Argument Injection to Remote Code Execution Proof of concept exploit for Fortinet FortiSIEM which abuses an argument injection to write a file to gain code execution as root Blog Post Deep-dive analysis here: Horizon3.ai - CVE-2025-64155: Three Years of Remotely...

CVE-2024-23108

CVE-2024-23108 POC Proof of concept exploit to blindly execute commands as root on vulnerable FortiSIEM appliances. I just quickly added the option to supply a list and added some coloring. The orginal and all the cred goes to horizon3 see blog post below Blog Post Root cause and indicators of...

CVE-2024-23108

CVE-2024-23108: Fortinet FortiSIEM Unauthenticated 2nd Order Command Injection Proof of concept exploit to blindly execute commands as root on vulnerable FortiSIEM appliances Blog Post Root cause and indicators of compromise here:...

CVE-2023-34992

CVE-2023-34992: Fortinet FortiSIEM Unauthenticated Command Injection Proof of concept exploit to blindly execute commands as root on vulnerable FortiSIEM appliances Blog Post Root cause and indicators of compromise here:...

CVE-2026-106176

A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests...

CVE-2026-106173

A improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets...

CVE-2026-106173

A path traversal vulnerability exists in Fortinet FortiSIEM 7.5.0 due to improper limitation of a pathname to a restricted directory. This flaw allows an attacker to execute unauthorized code or commands by sending specially crafted packets. The vulnerability is characterized by a CRITICAL base s...

CVE-2026-106173

A improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets...

CVE-2026-106176

A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests...

CVE-2026-106176

A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 allows an attacker to execute unauthorized code or commands by sending specially crafted HTTP requests . The vulnerability is associated with CWE-862 and has a LOW base severity score of 3.8. No specific exploit details or remediat...

PT-2026-111783

Name of the Vulnerable Software and Affected Versions Fortinet FortiSIEM version 7.5.0 Description An improper limitation of a pathname to a restricted directory, known as path traversal, allows an attacker to execute unauthorized code or commands by sending specially crafted packets...

watchTowr-vs-FortiSIEM-CVE-2025-25256

watchTowr-vs-FortiSIEM-CVE-2025-25256 Detection Artifact Generator for FortiSIEM CVE-2025-25256 https://github.com/user-attachments/assets/1aa1040a-af34-460d-8844-1e440efa9ba1 See our blog post for technical details Detection in Action python watchTowr-vs-FortiSIEM-CVE-2025-25256.py -r...

Ashwesker-CVE-2025-64155

🔒 CVE-2025-64155: Critical FortiSIEM Vulnerability 📌 Overview CVE-2025-64155 is a critical security vulnerability in Fortinet FortiSIEM , a popular security information and event management platform. Publicly disclosed on January 13, 2026 , it allows unauthenticated remote attackers to execute...

CYBERDUDEBIVASH-FortiSIEM-CVE-2025-64155-Scanner

Escáner CYBERDUDEBIVASH FortiSIEM CVE-2025-64155 Herramienta autorizada de alto impacto del ECOSISTEMA CYBERDUDEBIVASH para detectar CVE-2025-64155 Inyección de comandos en phMonitor de FortiSIEM. Escanea de forma ética puertos abiertos y comportamientos vulnerables. Características Verificación...

Fortinet FortiSIEM 7.4.1 <= 7.4.2 / 7.5.0 <= 7.5.1 Open Redirect (FG-IR-26-169)

The version of Fortinet FortiSIEM running on the remote host is 7.4.1 through 7.4.2, or 7.5.0 through 7.5.1. It is, therefore, affected by a URL redirection to untrusted site vulnerability: - A URL redirection to untrusted site 'open redirect' vulnerability in Fortinet FortiSIEM may allow an...

CVE-2026-84389

A url redirection to untrusted site 'open redirect' vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via...

CVE-2026-84389

A url redirection to untrusted site 'open redirect' vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via...

CVE-2026-84389

Fortinet FortiSIEM versions 7.5.0 through 7.5.1 and 7.4.1 through 7.4.2 are affected by an open redirect vulnerability that may allow an attacker to execute unauthorized code or commands. The CVSS v3.1 base score is 3.1 (LOW) , with a network attack vector, high complexity, no privileges required...

CVE-2026-84389

A url redirection to untrusted site 'open redirect' vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via...

EUVD-2026-72923

A url redirection to untrusted site 'open redirect' vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via...