---
title: "Exploit code went public five days before Fortinet's earnings call, and Arete says Sell at $117"
description: "Public exploit code for a second Fortinet flaw and a fresh Sell rating landed within 48 hours of each other, and the 44-analyst average target now sits below the price with the print seven days out."
publisher: "The Inference"
section: "Markets"
published: 2026-10-21T13:18:49.132Z
modified: 2026-10-21T13:18:49.132Z
canonical: https://theinference.org/article/exploit-code-went-public-five-days-before-fortinet-s-earnings-call-and-arete-says-sell-at-117
language: en
keywords: "Fortinet, Cybersecurity, Earnings, Analyst Ratings, Vulnerabilities"
---

# Exploit code went public five days before Fortinet's earnings call, and Arete says Sell at $117

> Public exploit code for a second Fortinet flaw and a fresh Sell rating landed within 48 hours of each other, and the 44-analyst average target now sits below the price with the print seven days out.

Seven days before [Fortinet](https://theinference.org/markets/companies/fortinet) reports earnings, someone published the recipe for breaking into its own security product. On October 20, 2026, [proof-of-concept code went public](https://cyberpress.org/critical-fortinet-fortisiem-rce-vulnerability/) for CVE-2026-106173, a critical flaw in FortiSIEM, the company's security-monitoring tool, that lets an attacker run commands with no login at all [1]. On October 21, Arete Research [downgraded Fortinet to Sell, price target $117](https://www.marketscreener.com/news/arete-downgrades-fortinet-to-sell-price-target-is-117-ce785cd8d089f525) [2]. The stock [closed at $170.93](https://www.ad-hoc-news.de/boerse/news/corporate-news/fortinet-stock-ubs-keeps-target-for-fortinet-stock-at-usd-200-00/70374609) [3]. The third-quarter report lands October 28 [3].

## The stakes: a $125 billion company, a 59.7 P/E, and a hard number to beat

Fortinet is a $125.4 billion firewall and security platform company whose product serves more than 700,000 organizations [3]. It trades at a 59.67 price-to-earnings ratio [3], a price that assumes the growth keeps coming. The bar is specific: management [guided third-quarter revenue of $2.010 billion to $2.100 billion](https://www.ad-hoc-news.de/boerse/news/corporate-news/fortinet-stock-trades-at-eur-152-58-ahead-of-october-28-results/70371629) and earnings per share of $0.83 to $0.87 [4]. Second quarter came in at $2.05 billion revenue, up 25.6 percent, beating on EPS [4]. Beat that, and the multiple holds. Miss it, and the fastest way to compress a 59-times multiple is a miss [4].

*Chart: **Revenue is accelerating into the print, and guidance asks for more** Column chart of Fortinet quarterly revenue from Q1 2024 to Q2 2026, rising from $1.353 billion to $2.048 billion, with the Q3 2026 guidance midpoint of $2.055 billion shown as a highlighted estimate column carrying a range of $2.01 to $2.10 billion.*

*Fortinet quarterly revenue from its SEC filings, USD billions. Q3 2026 is the midpoint of company guidance of $2.010 billion to $2.100 billion, range shown [4]. [8][7][4]*

## The complication: the security company's own monitor is the unguarded door

The flaw Fortinet [disclosed on October 13](https://thehackernews.com/2026/10/critical-fortisiem-flaw-gets-public.html) sits in a service that asks for no password and no certificate [5]. Anyone with network access to port 27918 can reach it [5].

Horizon3.ai's Zach Hanley showed a null-byte trick that lets the attacker overwrite an existing file, keeping its permissions, and a cron job picks that file up and runs it every 60 seconds [5]. A public exploit proves the chain works end to end. A company selling "we secure you" carries its own brand in every renewal negotiation, and this is the second Fortinet exploit story in a month: [CISA's patch deadline on firewalls hit October 19](https://theinference.org/article/morgan-stanley-cut-fortinet-as-cisa-s-october-19-patch-deadline-hits-keys-still-open-500-firewalls) [6].

## The receipts: the sell side now brackets the price from both sides

The analyst board after Arete's move: [Barclays](https://theinference.org/markets/companies/barclays) $210 and RBC $205 at the top, both set October 12; UBS $200; Mizuho and [Wells Fargo](https://theinference.org/markets/companies/wells-fargo) at $160, both carrying Underperform and Underweight tags; Arete $117 at the bottom [2]. The 44-analyst average target is $168.36, which sits 1.5 percent below the last close [2]. When the average target falls under the price, the market has already paid for something the street has not yet agreed to fund.

*Chart: **The target board now brackets the stock from $117 to $210** Bar chart of analyst price targets on Fortinet after Arete's downgrade: Barclays $210, RBC $205, UBS $200, Mizuho and Wells Fargo $160, and Arete highlighted at $117, with reference lines at the $170.93 last close and the $168.36 average target.*

*Analyst price targets on Fortinet after Arete's October 21 downgrade, USD per share. Mizuho carries an Underperform tag and Wells Fargo an Underweight; the stock last closed at $170.93 [2]. [2]*

## The counterpoint: the bulls have a real case

[Morgan Stanley](https://theinference.org/markets/companies/morgan-stanley)'s growth warning [6] and a proof-of-concept are not customer losses. Fortinet just printed 25.6 percent revenue growth, beat on earnings, and completed the Virtue AI acquisition on August 17 to add AI security to the lineup [4]. No confirmed exploitation of CVE-2026-106173 in the wild has been reported; a public exploit proves reproducibility, not a breach [1]. Deferral of deals is a hypothesis, not a line item, and it will not show up until renewals and billings do, which is not the October 28 revenue line [1].

## The print decides which price was the mistake

Watch three things on October 28: revenue against the $2.010 billion to $2.100 billion guide [4], anything on service revenue and renewals where a scared customer would first show up, and whether management changes the Q4 view. The stock's 52-week range runs $73.55 to $197.13 [3]. The price is $170.93, the average target is $168.36 [2], and the print decides which one was the mistake.

## Takeaway

Public exploit code for a critical FortiSIEM flaw and Arete's Sell rating at $117 landed within 48 hours of each other, seven days before Fortinet's October 28 print, with the 44-analyst average target already sitting below the share price.

## Sources

1. [Cyberpress, Critical Fortinet FortiSIEM RCE Vulnerability Gets Public Exploit Code, 21 October 2026](https://cyberpress.org/critical-fortinet-fortisiem-rce-vulnerability/)
2. [MarketScreener / MT Newswires, Arete Downgrades Fortinet to Sell, Price Target is $117, 21 October 2026](https://www.marketscreener.com/news/arete-downgrades-fortinet-to-sell-price-target-is-117-ce785cd8d089f525)
3. [Ad-hoc-news, Fortinet stock: UBS keeps target for Fortinet stock at USD 200.00, 21 October 2026](https://www.ad-hoc-news.de/boerse/news/corporate-news/fortinet-stock-ubs-keeps-target-for-fortinet-stock-at-usd-200-00/70374609)
4. [Ad-hoc-news, Fortinet stock trades at EUR 152.58 ahead of October 28 results, 21 October 2026](https://www.ad-hoc-news.de/boerse/news/corporate-news/fortinet-stock-trades-at-eur-152-58-ahead-of-october-28-results/70371629)
5. [The Hacker News, Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution, 20 October 2026](https://thehackernews.com/2026/10/critical-fortisiem-flaw-gets-public.html)
6. [The Inference, Morgan Stanley cut Fortinet as CISA's October 19 patch deadline hits; keys still open 500 firewalls, 18 October 2026](https://theinference.ai/article/morgan-stanley-cut-fortinet-as-cisa-s-october-19-patch-deadline-hits-keys-still-open-500-firewalls)
7. [Fortinet SEC filings, quarterly revenue, retrieved 21 October 2026 via company_series](https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001262039)
8. [Fortinet, quarterly figures from its SEC filings, retrieved 21 October 2026](https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001262039)


---

Exploit code went public five days before Fortinet's earnings call, and Arete says Sell at $117 — The Inference. Canonical: https://theinference.org/article/exploit-code-went-public-five-days-before-fortinet-s-earnings-call-and-arete-says-sell-at-117