CVE-2024-23109criticalobserved exploitationCWE-78

CVE-2024-23109: critical vulnerability in Fortinet FortiSIEM

Published · Updated

Follow this CVE+ Monitor FortiSIEM

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

50Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Actcvss 9.7epss 3.3%
from disclosure to weapon
Published on NVDFeb 5
VulnCheck+386d
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized code or commands via via crafted API requests.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:F/RL:X/RC:X
Affected products
Fortinet · FortiSIEM
Related CVEs — Fortinet FortiSIEM

In the same product, most dangerous first.

CVE-2023-34992CRITICALCVE-2023-34992EPSS 81.7%CVE-2024-23108CRITICALCVE-2024-23108EPSS 80.3%CVE-2025-25256CRITICALCVE-2025-25256EPSS 65.0%CVE-2025-64155CRITICALCVE-2025-64155EPSS 43.9%CVE-2023-36553CRITICALCVE-2023-36553EPSS 1.9%CVE-2026-106173CRITICALCVE-2026-106173EPSS 1.0%