Fortinet warns of critical command injection bug in FortiSIEMFortinet is alerting customers of a critical OS command injection vulnerability in FortiSIEM report server that could be exploited by remote, unauthenticated attackers to execute commands through specially crafted API requests. [...]
Source: Fortinet warns of critical command injection bug in FortiSIEM (https://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-command-injection-bug-in-fortisiem/)