Twin Max-Severity Bugs Open Fortinet's SIEM to Code Execution

Two critical command-injection vulnerabilities (CVE-2024-23108 and CVE-2024-23109) have been reported in Fortinet FortiSIEM with provisional CVSS scores of 10; they may allow attackers to execute unauthorized code via crafted API requests across multiple FortiSIEM versions, but technical details and evidence of active exploitation are currently limited and Fortinet has not issued additional public information.