Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

A critical path traversal vulnerability tracked as CVE-2026-106173 has been identified in Fortinet FortiSIEM with a CVSS score of 9.4. Cybersecurity researchers have released a public proof-of-concept (PoC) exploit for this flaw. The vulnerability allows an unauthenticated attacker to execute arbitrary code or commands remotely via specially crafted requests. Fortinet has released a patch for the issue. The public availability of a PoC significantly raises the risk of exploitation in the wild. Organizations using FortiSIEM are urged to apply the patch immediately. The flaw is classified as critical due to its unauthenticated nature and high CVSS score.