NewsFortinet PSIRT
Arbitrary file write in grpc phQueryMaster
Teaser from the source
CVSSv3 Score: 9.4 An Improper limitation of a pathname to a restricted directory ('path traversal') [CWE-22] in FortiSIEM may allow an unauthenticated attacker to execute unauthorized code or commands via specially crafted packets. Revised on 2026-10-13 00:00:00
This is the RSS-feed teaser. Read the full article at the original source.
Read at Fortinet PSIRTMore on phQueryMaster
Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-180
ID