CVE-2023-34992

CVE-2023-34992: Fortinet FortiSIEM Unauthenticated Command Injection Proof of concept exploit to blindly execute commands as root on vulnerable FortiSIEM appliances Blog Post Root cause and indicators of compromise here:...

CVE-2025-64155

CVE-2025-64155: Fortinet FortiSIEM Argument Injection to Remote Code Execution Proof of concept exploit for Fortinet FortiSIEM which abuses an argument injection to write a file to gain code execution as root Blog Post Deep-dive analysis here: Horizon3.ai - CVE-2025-64155: Three Years of Remotely...

watchTowr-vs-FortiSIEM-CVE-2025-25256

watchTowr-vs-FortiSIEM-CVE-2025-25256 Detection Artifact Generator for FortiSIEM CVE-2025-25256 https://github.com/user-attachments/assets/1aa1040a-af34-460d-8844-1e440efa9ba1 See our blog post for technical details Detection in Action python watchTowr-vs-FortiSIEM-CVE-2025-25256.py -r...

CVE-2024-23108

CVE-2024-23108: Fortinet FortiSIEM Unauthenticated 2nd Order Command Injection Proof of concept exploit to blindly execute commands as root on vulnerable FortiSIEM appliances Blog Post Root cause and indicators of compromise here:...

CVE-2024-23108

CVE-2024-23108 POC Proof of concept exploit to blindly execute commands as root on vulnerable FortiSIEM appliances. I just quickly added the option to supply a list and added some coloring. The orginal and all the cred goes to horizon3 see blog post below Blog Post Root cause and indicators of...

CYBERDUDEBIVASH-FortiSIEM-CVE-2025-64155-Scanner

CYBERDUDEBIVASH FortiSIEM CVE-2025-64155 Scanner Authorized high-impact tool from CYBERDUDEBIVASH ECOSYSTEM to detect CVE-2025-64155 FortiSIEM phMonitor Command Injection. Scans for open ports and vulnerable behaviors ethically. Features Port check for TCP/7900 Optional safe probe for handler...

Ashwesker-CVE-2025-64155

🔒 CVE-2025-64155: Critical FortiSIEM Vulnerability 📌 Overview CVE-2025-64155 is a critical security vulnerability in Fortinet FortiSIEM , a popular security information and event management platform. Publicly disclosed on January 13, 2026 , it allows unauthenticated remote attackers to execute...

VulnCheck KEV: CVE-2026-106173

A improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets...

Fortinet FortiSIEM 6.4.x <= 7.2.7 / 7.3.x <= 7.3.5 / 7.4.x <= 7.4.2 / 7.5.x <= 7.5.1 Missing Authorization (FG-IR-26-183)

The version of Fortinet FortiSIEM running on the remote host is 6.4.x through 7.2.7, 7.3.x through 7.3.5, 7.4.x through 7.4.2, or 7.5.x through 7.5.1. It is, therefore, affected by a missing authorization vulnerability: - A missing authorization vulnerability in FortiSIEM GUI may allow an...

CVE-2026-106173

CVE-2026-106173 — FortiSIEM Path Traversal Vulnerability Overview This repository documents CVE-2026-106173 , a reported path traversal vulnerability affecting Fortinet FortiSIEM. Path traversal vulnerabilities occur when an application fails to properly validate file paths, potentially allowing ...

CVE-2026-106173

CVE-2026-106173: Fortinet FortiSIEM gRPC Path Traversal File Write RCE This repository contains a proof of concept for CVE-2026-106173, an unauthenticated remote code execution vulnerability in Fortinet FortiSIEM. Vulnerability Details The FortiSIEM gRPC QueryResultReq handler processes untrusted...

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

Cybersecurity researchers have released a proof-of-concept PoC exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 CVSS score: 9.4, is a critical path traversal flaw that...

Exploit for CVE-2026-106173

CVE-2026-106173 — FortiSIEM Path Traversal Vulnerability...

Vulnerabilities handled in Fortinet FortiSIEM

Fortinet has identified vulnerabilities in FortiSIEM version 7.5.0. The first vulnerability involves a path traversal issue, where the system does not impose sufficient restrictions on pathnames leading to restricted directories. This allows unauthorized attackers to send specially crafted packet...

CVE-2026-106176

A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests...

CVE-2026-106173

A improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets...

CVE-2026-106173

A improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets...

EUVD-2026-98968

A improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets...

CVE-2026-106173

A improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets...

CVE-2026-106173

A path traversal vulnerability exists in Fortinet FortiSIEM 7.5.0 due to improper limitation of a pathname to a restricted directory. This flaw allows an attacker to execute unauthorized code or commands by sending specially crafted packets. The vulnerability is characterized by a CRITICAL base s...