Public Proof-of-Concept Exploit Released for Critical FortiSIEM Vulnerability

Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM. The vulnerability, tracked as CVE-2026-106173, is a critical path traversal flaw with a CVSS score of 9.4. An unauthenticated attacker could exploit this vulnerability to execute unauthorized code or commands on the affected system via specially crafted requests. The release of the PoC exploit means that the vulnerability is now actively observable in the wild. Fortinet has released a security advisory and corresponding patch. Users of FortiSIEM are strongly advised to apply the latest firmware or software update to mitigate the risk of exploitation, which could lead to full system compromise, data exfiltration, and lateral movement within the network.