FortiSIEM Archives • Daily CyberSecurity

Do Son October 26, 2026

Our weekly CVE report for Oct 19-25, 2026 tracks 4,222 new CVEs and 12 exploited vulnerabilities, including PHP2Shell flaws not yet in CISA KEV.

FortiSIEM Flaw CVE-2026-106173 Exploited in the Wild After PoC and Details Go Public FortiSIEM vulnerability CVE-2026-106173 exploited in the wild with public PoC exploit

Do Son October 26, 2026

FortiSIEM vulnerability CVE-2026-106173 is exploited in the wild after Horizon3 released details and a PoC exploit. Upgrade to 7.5.1 now.

FortiSIEM Vulnerability Details and PoC Exploit Released for Critical Unauthenticated RCE Flaw FortiSIEM vulnerability CVE-2026-106173 enables remote code execution, PoC exploit published

Do Son October 23, 2026

Horizon3 released details and a PoC for CVE-2026-106173, a FortiSIEM vulnerability enabling unauthenticated remote code execution. Patch now.

Fortinet Patches Critical FortiSandbox and FortiSIEM Flaws Among 13 Vulnerabilities Fortinet vulnerabilities FortiSandbox authentication bypass and FortiSIEM code execution patched in October 2026

Do Son October 13, 2026

Thirteen Fortinet vulnerabilities are now fixed, including a CVSS 9.6 FortiSandbox authentication bypass and a 9.4 FortiSIEM flaw. Patch now.

Do Son January 14, 2026

PoC exploit code released for critical FortiSIEM flaw CVE-2025-64155 (CVSS 9.4). Unauthenticated RCE allows root access. Upgrade to v7.4.1 now.

Do Son August 13, 2025

Critical FortiSIEM flaw (CVE-2025-25256) allows remote unauthenticated command injection. Exploit code active in the wild—patch immediately.

CVE-2023-36553: FortiSIEM Vulnerability Exposes Systems to Remote Code Execution CVE-2023-36553 Fortinet Critical Vulnerabilities FortiSandbox CVE-2026-26083

Do Son November 15, 2023

CVE-2023-36553 and assigned a CVSS score of 9.3, stems from an OS command injection flaw in the FortiSIEM report server.

CVE-2023-34992 & CVE-2023-34993: Critical Vulnerabilities in FortiSIEM and FortiWLM FortiSandbox Vulnerability Unauthenticated RCE FortiClient EMS Vulnerability CVE-2026-21643 FortiClient EMS Vulnerability CVE-2026-21643 CVE-2023-34992 - CVE-2023-37936 Fortinet Vulnerabilities CVE-2025-64155

Do Son October 10, 2023

FortiWLM counterpart, the CVE-2023-34992 vulnerability allows for remote unauthenticated OS command injections