Critical FortiSIEM Vulnerability Let Attackers to Execute Malicious Commands – PoC Found in Wild

A critical security vulnerability in the Fortinet FortiSIEM platform that allows unauthenticated attackers to execute arbitrary commands remotely.  The vulnerability CVE-2025-25256, classified as CWE-78 (OS Command Injection), has been actively exploited in the wild with practical exploit code already circulating among threat actors. Key Takeaways1. Critical FortiSIEM flaw actively exploited with PoC in the wild.2. […]

The post Critical FortiSIEM Vulnerability Let Attackers to Execute Malicious Commands – PoC Found in Wild appeared first on Cyber Security News.