CVE-2025-64155 - Vulnerability Details

Related Threat Clusters

• Critical FortiSIEM Vulnerability CVE-2025-64155 Under Active Exploitation

  A critical vulnerability (CVE-2025-64155) in Fortinet's FortiSIEM platform allows unauthenticated remote code execution via crafted TCP requests. This OS command injection flaw affects the phMonitor service, which is…

  3 articles · Updated January 15, 2026
• Fortinet Addresses Critical Vulnerabilities in Multiple Products

  Fortinet has patched critical vulnerabilities affecting FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager. These security defects, which allow for authentication bypass and could lead to configuration leaks and code…

  6 articles · Updated January 14, 2026

Recent Intelligence Reports

• Fortinet FortiSIEM Vulnerability CVE-2025 — Cybersecuritynews · January 15, 2026
• PoC exploit for critical FortiSIEM vulnerability released (CVE-2025-64155) — Feeds2.Feedburner · January 15, 2026
• Fortinet fixed two critical flaws in FortiFone and FortiSIEM — Securityaffairs.Co · January 14, 2026
• Fortinet fixed two critical flaws in FortiFone and FortiSIEM — Securityaffairs.Co · January 14, 2026
• Critical FortiSIEM Vulnerability(CVE-2025-64155) Enable Full RCE and Root Compromise — Cybersecuritynews · January 14, 2026

Related Entities