Feeds2.Feedburner
Critical FortiSIEM Vulnerability CVE-2025-64155 Under Active Exploitation
First seen 17 Jan 2026, 05:01 UTC
•
•74.6
Export
Article Content
Browse articles
A critical vulnerability (CVE-2025-64155) in Fortinet's FortiSIEM platform allows unauthenticated remote code execution via crafted TCP requests. This OS command injection flaw affects the phMonitor service, which is crucial for enterprise security monitoring, and is currently being exploited in the wild. Organizations are urged to apply patches immediately to mitigate risks.
Ask AI about this cluster
Answers cite the sources they use
Analyzing cluster data...
Referenced clusters
Something went wrong. Please try again.
More articles in this cluster
Continue Reading
Exploitation of FortiGate SSO Vulnerabilities by Threat Actors
Critical Command Injection Vulnerability in Arista VeloCloud Orchestrator Under Active Exploitation
GRU Compromises Home Routers in 23 States to Steal Outlook Credentials
FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation
Critical Check Point VPN Vulnerability Exploited by Ransomware Gang
Widespread DNS Poisoning Campaign Targets Hotel Wi-Fi to Steal Credentials