NewsFortinet PSIRT

    Arbitrary file write in grpc phQueryMaster

    Teaser from the source

    CVSSv3 Score: 9.4 An Improper limitation of a pathname to a restricted directory ('path traversal') [CWE-22] in FortiSIEM may allow an unauthenticated attacker to execute unauthorized code or commands via specially crafted packets. Revised on 2026-10-13 00:00:00

    This is the RSS-feed teaser. Read the full article at the original source.

    Read at Fortinet PSIRT

    Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-180

    ID