TGTGInsighttelegram intelligenceLIVE / telegram public index
TGINSIGHT POST
Post #8205
@thehackernews
The Hacker News
Post content
Post content
π¨ Fortinet fixed a CVSS 9.4 bug in FortiSIEM that allows unauthenticated code execution. The issue is in the phMonitor service on TCP port 7900. Crafted requests can trigger OS command injection, enabling file writes as admin and escalation to root via a scheduled task. π Details β https://thehackernews.com/2026/01/fortinet-fixes-critical-fortisiem-flaw.html π Patch now. Restrict access to port 7900.