X XFediYour place in the Fediverse
XFEDI

Conversation

ActivityPub
↳ In reply to a post

Phase two is already live — a public proof-of-concept exploit is in the wild.

Versions 7.0 through 7.5.0 are in the blast radius. The health bar is not regenerating.

Patch to FortiSIEM 7.5.1 immediately, block TCP port 27918 except for trusted management networks, and check whether redishb.sh or phLicenseTool has been tampered with.

Reward: You've received the Scorched Rack Trophy — wall-mountable, non-functional, conversation piece. (2/3)

↩ Reply ♡ 0 · ↻ 0 ↗ Original

Oct 21, 2026 · 10:40 UTC

Replies
↳ In reply to a post

https://infosec.exchange/@beyondmachines1/117478083095438123

#FortiSIEM #CriticalVulnerability #RemoteCodeExecution #ZeroDay #Fortinet #gRPC (3/3)

Infosec ExchangeBeyondMachines :verified: (@[email protected])Critical FortiSIEM gRPC Flaw Allows Unauthenticated Remote Code Execution Fortinet patched a critical path traversal vulnerability (CVE-2026-106173) in FortiSIEM that allows unauthenticated attackers to achieve remote code execution by overwriting system scripts via a gRPC service. **If you run FortiSIEM on-premise (versions 7.0 through 7.5.0), upgrade to 7.5.1 or later right away. A working exp
↩ Reply ♡ 0 · ↻ 0 ↗ Original