As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE
Fortinet released a security advisory on October 13, 2026, for CVE-2026-106173, a critical vulnerability in FortiSIEM that permits arbitrary file write through a flaw in a gRPC service. The vulnerability has a CVSS score of 9.8 (v3.1) and can lead to remote code execution (RCE). Horizon3 noted the discovery as part of ongoing research into FortiSIEM security issues.
Why it matters: Organizations running FortiSIEM must apply patches immediately, as the high CVSS score and RCE potential create urgent risk to security monitoring infrastructure and data.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE
Fortinet released a security advisory on October 13, 2026, for CVE-2026-106173, a critical vulnerability in FortiSIEM that permits arbitrary file write through a flaw in a gRPC service. The vulnerability has a CVSS score of 9.8 (v3.1) and can lead to remote code execution (RCE). Horizon3 noted the discovery as part of ongoing research into FortiSIEM security issues.
Why it matters: Organizations running FortiSIEM must apply patches immediately, as the high CVSS score and RCE potential create urgent risk to security monitoring infrastructure and data.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE
Fortinet disclosed CVE-2026-106173, a critical vulnerability in FortiSIEM that allows arbitrary file write through a gRPC service path traversal flaw. The vulnerability received a CVSS score of 9.8 and was added to VulnCheck's known exploited vulnerabilities list. Horizon3 has previously reported multiple critical FortiSIEM issues.
Why it matters: FortiSIEM users face remote code execution risk from this high-severity flaw and should apply Fortinet's patch immediately; security teams relying on FortiSIEM for monitoring need to verify their deployment status and update priority.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE
Fortinet disclosed CVE-2026-106173, a critical vulnerability in FortiSIEM that enables arbitrary file write through a flaw in a gRPC service. The vulnerability allows remote code execution and carries a CVSS score of 9.8.
Why it matters: FortiSIEM users face immediate risk from this actively exploited vulnerability; patch or isolate affected systems urgently.
- Source published
- First seen by Cybersecurity Tracker