Arbitrary file write in grpc phQueryMaster
Plan PatchCVSS 9.4FG-IR-26-180Oct 13, 2026
Fortinet
IT in OT - Fortinet products are commonly deployed at IT/OT network boundaries
Attack path
Attack VectorNetwork
Auth RequiredNone
ComplexityLow
User InteractionNone needed
Summary
Arbitrary file write into phQueryMaster daemon
What this means
What could happen
Could allow access to configuration files or firmware
Who's at risk
Organizations in critical infrastructure using Fortinet equipment
How it could be exploited
Attacker on the corporate network or internet could reach this device without any credentials. The attack is straightforward with no special conditions
Exploitability
Unlikely to be exploited — EPSS score 0.5%
Public Proof-of-Concept (PoC) on GitHub (3 repositories)
Affected products (1)
ProductAffected VersionsFix Status
FortiSIEM7.5.07.5.1+
CVEs (1)
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/a9d80937-eb5a-47ea-b171-ccb9208a756dGet OTPulse briefings by email
Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.