Vulnerabilities
FortiSIEM GUI Authorization Flaw Allows Unauthorized Code Execution
Fortinet warns that a missing authorization check in the FortiSIEM web interface could let authenticated attackers run unauthorized commands.
CWE-862
Everything Threat Times has reported about CWE-862: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Wazuh Critical Flaw Allows Cluster Workers to Overwrite Master Config Files
A high-severity vulnerability in Wazuh versions before 4.14.8 enables malicious cluster workers to overwrite protected configuration files and achieve root remote code execution.