FortiSIEM RCE Flaw CVE-2026-106173 Gets Public PoC
Security researchers at Horizon3.ai on Monday published a working proof-of-concept exploit for a critical FortiSIEM vulnerability that lets an unauthenticated attacker run code remotely on affected appliances. The flaw, tracked as CVE-2026-106173, is a path traversal issue that Fortinet rated critical (CVSS 9.4) and patched on October 13 in advisory FG-IR-26-180. It affects FortiSIEM 7.5.0,…












