CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE
Summary
Horizon3 reports CVE-2026-106173 affecting FortiSIEM via an unauthenticated gRPC service on port 27918. The flaw enables arbitrary file write and, with suitable conditions, potential code execution by overwriting a recurring cron-driven script. The article includes details on the vulnerability, exploit steps, PoC, and indicators of compromise, with remediation guidance and references.