PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE

horizon3.ai | vulnerability | CVE-2026-106173 | #rce | #vulnerability-research | #path-traversal | #fortinet | #grpc | #fortisiem | #cve-2026-106173 | #horizon3
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Horizon3 analyzes CVE-2026-106173, a critical FortiSIEM gRPC vulnerability enabling unauthenticated path traversal, arbitrary file writes, and code execution.
CVE
CVE-2026-106173
Published
Collected

Related coverage

Critical · vulnerability · github.com
CVE-2026-106173: Fortinet FortiSIEM gRPC Path Traversal to Pre-Auth RCE PoC
Provides a working pre-auth exploit against FortiSIEM instances exposing port 27918, escalating from gRPC path traversal to root-level remote command execution without credentials.
vulnerability · horizon3.ai
FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive (CVE-2022-40684)
Fortinet recently patched a critical authentication bypass vulnerability that gives an attacker the ability to login as an administrator,
vulnerability · horizon3.ai
FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass IOCs (CVE-2022-40684)
# FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass IOCs (CVE-2022-40684) James Horseman October 11, 2022 Attack Blogs ## Introduction The recent FortiOS / FortiProxy /...
vulnerability · horizon3.ai
[CVE-2021-41765] Multiple Vulnerabilities in ResourceSpace
Advisory for CVE-2021-41765, a critical SQL injection vulnerability leading to remote code execution, by the Horizon3 red team.
vulnerability · horizon3.ai
Apache CVE-2021-41773, CVE-2021-42013
We wanted to do something a little bit different with this post. Our vulnerability disclosures, exploit proof-of-concepts, and attack analysis blog posts have…
vulnerability · horizon3.ai
[CVE-2020-3952] Compromising vCenter via SAML Certificates
A common attack path that Horizon3 has identified across many of its customers is abusing access to the VMware vCenter Identity Provider (IdP) certificate.
Back