Public PoC released for critical FortiSIEM unauthenticated RCE flaw CVE-2026-106173 (CVSS 9.4) via gRPC path traversal
Researchers at Horizon3.ai have published a proof-of-concept exploit for CVE-2026-106173 (CVSS 9.4), a critical path traversal flaw in Fortinet FortiSIEM that lets an unauthenticated attacker achieve remote code execution through specially crafted packets. Fortinet patched the flaw last week. The public PoC lowers the barrier to exploitat…