Exploit Code Published: Critical FortiSIEM Flaw Grants Unauthenticated Root Access

Exploit code has been published for a critical FortiSIEM flaw that can grant unauthenticated root access. The report, dated 14 January 2026, points to CVE-2025-64155 and highlights that a proof-of-concept exploit is available. Fortinet’s FortiSIEM product is the affected target, and the vulnerability is described in the article as enabling privilege escalation to root without authentication.

The piece also includes tags linking the flaw to Patch Alerts and PoC exploits, emphasising the potential for rapid exploitation in the wild. The article’s full technical details are behind a supporters-only section, but the publicly visible information confirms the existence of a PoC and the risk of unauthenticated access.