Arbitrary file write in grpc phQueryMaster
Fortinet warns of a CVSS 9.4 FortiSIEM path traversal letting unauthenticated attackers run commands.
Fortinet PSIRT advisory FG-IR-26-180 describes an improper pathname limitation (CWE-22) in FortiSIEM, tracked as an arbitrary file write in grpc phQueryMaster. The issue is scored CVSS 9.4 and may let an unauthenticated attacker execute unauthorized code or commands using specially crafted packets. The advisory was revised on 2026-10-13 and does not state that exploitation has been observed.
- CVSS 9.4 path traversal (CWE-22) in FortiSIEM grpc phQueryMaster.
- Unauthenticated attackers can run code or commands via crafted packets.
- Fortinet PSIRT advisory FG-IR-26-180, revised 2026-10-13.
- No exploitation in the wild is stated.
CVSSv3 Score: 9.4 An Improper limitation of a pathname to a restricted directory ('path traversal') [CWE-22] in FortiSIEM may allow an unauthenticated attacker to execute unauthorized code or commands via specially crafted packets. Revised on 2026-10-13 00:00:00
This source does not provide full text. Read it at fortiguard.fortinet.com.