Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

What happened?

Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially

Key details

• A critical path traversal flaw in FortiSIEM allows unauthenticated remote code execution.
• The vulnerability is tracked as CVE-2026-106173 with a CVSS score of 9.4.
• Attackers exploit the gRPC service on TCP port 27918 using crafted metadata.
• Unsafe path construction in SendQueryResult() passes user-supplied query-id without validation.
• Null byte injection in query-id truncates the auto-appended filename suffix.

Summarised by SecOraLens from The Hacker News. Always read the original source before acting. How SecOraLens verifies advisories.