Critical FortiSIEM Vulnerability Allows Attackers to Execute Malicious Commands, PoC Found in the Wild

**Executive summary:** Security researchers disclosed CVE-2025-25256, a critical OS command injection in Fortinet FortiSIEM (CVSS 9.8) enabling unauthenticated remote command execution with exploit code observed in the wild; Fortinet published affected versions and remediation steps (upgrades or migration for older releases) and recommends immediate inventory, patching, and monitoring while using port 7900 access restrictions as a temporary mitigation.