Covered by 2 outlets — first reported by Horizon3.ai, Oct 20, 12:34 UTC
CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE
MentionsFortinet
In brief
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially
From The Hacker News's coverage.
Continue reading
2 outlets, in the order they reported it.
Horizon3.aiFirst report
CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE
Horizon3 researchers analyze CVE-2026-106173, a critical Fortinet FortiSIEM vulnerability affecting an unauthenticated gRPC service.
The Hacker News
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution.
Explained
The technology and terms in this story. Learn more
- WeaknessPath traversalUsing ../ tricks in a file name to read or write files outside the intended folder.
- AttackRemote code execution · RCEA flaw that lets an attacker run their own code on someone else's machine over the network.
- ConceptProof of conceptA demonstration that a flaw can be exploited, usually published by researchers.
- ConceptCVSS · Common Vulnerability Scoring SystemA 0–10 score for how severe a vulnerability is in theory.
Why it was possible
The weaknesses behind this story's CVEs, from each CVE Record.