x.comthread︎ (@0xocdsec) on X
Post from 0xocdsec announcing a deep-dive on CVE-2026-106173 in Fortinet FortiSIEM. The flaw is an arbitrary file write in a gRPC service that leads to remote code execution. The author says this is the fourth year in a row they have researched FortiSIEM. The post itself gives no technical detail and links to the full analysis.
TL;DR Announces a deep-dive on a FortiSIEM gRPC arbitrary file write bug (CVE-2026-106173) that gives RCE.
CVEs named here
- CVE-2026-106173
Technologies named here
- Fortinet FortiSIEM
- Fortinet
- grpc
- FortiSIEM
Techniques named here
- Arbitrary file write
- RCE
Related in AppSec
github.comadvisoryFlowise MCP Security Bypass Enables RCE
huntress.comwriteupInside an Oracle Database SQL Injection Attack | Huntress
github.comrepoOASIS
blog.trailofbits.comwriteup