CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE
Horizon3 researchers analyze CVE-2026-106173, a critical Fortinet FortiSIEM vulnerability affecting an unauthenticated gRPC service. The deep-dive explains how path traversal and null-byte handling enable arbitrary file writes and remote code execution, along with indicators of compromise for defenders.
Read at Horizon3.ai Attack Team
- Vendor
- Fortinet
- Product
- FortiSIEM
- EPSS
- 0.010 (p63)
- Exposure class
- Network management
Why it ranks 25 (Notable)
- Product class: network management
- Widely deployed vendor product (Fortinet)
- Covered by 3 independent sources
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Horizon3.ai Attack Team (horizon3.ai)
- CVE-2026-106173 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.