https://infosec.exchange/@beyondmachines1/117478083095438123
#FortiSIEM #CriticalVulnerability #RemoteCodeExecution #ZeroDay #Fortinet #gRPC (3/3)
Infosec ExchangeBeyondMachines :verified: (@[email protected])Critical FortiSIEM gRPC Flaw Allows Unauthenticated Remote Code Execution
Fortinet patched a critical path traversal vulnerability (CVE-2026-106173) in FortiSIEM that allows unauthenticated attackers to achieve remote code execution by overwriting system scripts via a gRPC service.
**If you run FortiSIEM on-premise (versions 7.0 through 7.5.0), upgrade to 7.5.1 or later right away. A working exp