Public PoC Released for Critical FortiSIEM RCE

Public PoC Released for Critical FortiSIEM RCE

A public proof-of-concept exploit is now available for a critical FortiSIEM vulnerability enabling unauthenticated remote code execution. The issue affects an enterprise security platform used for monitoring and response, lowering the barrier from...

Fortinet FortiSIEM RCE Vulnerability Gets Public Exploit That Requires No Login

A public proof-of-concept exploit has been released for CVE-2026-106173, a critical vulnerability in Fortinet FortiSIEM that can let a remote attacker write files and run code without logging in. The flaw affects FortiSIEM 7.5.0. Fortinet released a fix in version 7.5.1, while version 7.6 is not affected, according to published reporting on the advisory. Fortinet […]

Critical Fortinet FortiSIEM RCE Vulnerability Gets Public PoC Exploit, Allowing Unauthenticated Attacks

Horizon3.ai has released a public proof-of-concept exploit for CVE-2026-106173, a critical vulnerability in Fortinet FortiSIEM. This vulnerability allows unauthenticated attackers to turn arbitrary file writes into remote code execution. Researcher Zach Hanley published a technical analysis on October 20, following Fortinet’s security advisory released on October 13. The vulnerability specifically affects the product’s gRPC communication […] Thi…

CVE-2026-106173: FortiSIEM RCE Deep-Dive

Horizon3 researchers analyze CVE-2026-106173, a critical Fortinet FortiSIEM vulnerability affecting an unauthenticated gRPC service. The deep-dive explains how path traversal and null-byte handling enable arbitrary file writes and remote code execution, along with indicators of compromise for defenders.