Fortinet Fixes Critical FortiSIEM Flaw Allowing Unauthenticated Remote Code Execution
Fortinet released updates for a critical OS command injection flaw in FortiSIEM, tracked as CVE-2025-64155 and rated 9.4 on CVSS, that lets an unauthenticated attacker execute unauthorized code or commands via crafted TCP requests. Researcher Zach Hanley...