Hackers now exploiting critical Fortinet FortiSIEM flaw in attacks
ID: 1de3ab35-2af6-53fd-b938-4a49a438df15
STIX ID: report--1de3ab35-2af6-53fd-b938-4a49a438df15
Feed Name: Bleeping Computer
Threat Score
A critical unauthenticated OS command injection in Fortinet FortiSIEM (CVE-2025-64155) allows attackers to achieve arbitrary writes and escalate to root by abusing exposed phMonitor command handlers; proof-of-concept code is public and researchers report active exploitation in the wild, Fortinet has released patches and a workaround to limit phMonitor access.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.