← Back | CVE Intelligence Hub

CVE-2026-106173[Critical]

Curated 2 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-106173.

Vendor: Fortinet
Product: FortiSIEM
Coverage Span: 2026-10-20
Reports: 2 related reports

Associated Reports & Timeline

CVE-2026-106173: Fortinet FortiSIEM gRPC Path Traversal to Pre-Auth RCE PoC

# CVE-2026-106173: Fortinet FortiSIEM gRPC Path Traversal File Write RCE This repository contains a proof of concept for CVE-2026-106173, an unauthenticated remote code execution vulnerability in...

Why it matters: Provides a working pre-auth exploit against FortiSIEM instances exposing port 27918, escalating from gRPC path traversal to root-level remote command execution without credentials.

CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE

Horizon3 analyzes CVE-2026-106173, a critical FortiSIEM gRPC vulnerability enabling unauthenticated path traversal, arbitrary file writes, and code execution.