Horizon3.ai publishes public PoC for FortiSIEM unauthenticated RCE CVE-2026-106173 via phQueryMaster gRPC file overwrite
Horizon3.ai has released a public proof-of-concept exploit for CVE-2026-106173, a critical flaw in Fortinet FortiSIEM that lets unauthenticated attackers turn an arbitrary file write into remote code execution. Researcher Zach Hanley published the technical analysis on October 20, following Fortinet's advisory FG-IR-26-180 of October 13. …