LatestCovered by 2 sources — first reported by The Hacker News, Oct 20, 15:38 UTCCritical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code ExecutionMentionsApache Software FoundationFortinetCoverageOct 20, 15:38 UTCThe Hacker NewsCritical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code ExecutionOct 21, 15:22 UTCRapid7 BlogCVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPVulnerabilities in this storyCVE-2026-106173Critical 9.8EPSS 0.5%CVE-2026-109618Critical 9.2CVE-2026-109619Critical 9.2