cve-2026-106173
cve-2026-106173 is Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM - horizon3ai/CVE-2026-106173. It is ranked #597 on the Dev Radar, in Security, first seen 6 days ago and shared in 2 posts (25.1k views).
GitHub - horizon3ai/CVE-2026-106173: Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM · GitHub Skip to content Navigation Menu Sign in Appearance settings Search / Sign in Sign up Appearance settings You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert {{ message }} Repository navigation CVE-2026-106173 Public Notifications You must be signed in to change notification settings Fork 5 ( 5 ) Star…
What people said about cve-2026-106173 on X
🚨 PoC published for a critical unauthenticated Fortinet FortiSIEM remote code execution vulnerability; CVE-2026-106173 PoC: https://github.com/horizon3ai/CVE-2026-106173 The flaw affects FortiSIEM's gRPC QueryResultReq handler. Improper validation of attacker-controlled metadata allows path traversal and arbitrary…
— @DarkWebInformer, 6 days ago · 279 likes · see the post
A FortiSIEM server can be compromised without an attacker logging in, and the public exploit shows how a file-writing bug can become remote code execution this targets Fortinet's gRPC service on TCP port 27918 The vulnerable SendQueryResult handler accepts attacker-controlled metadata and uses it to construct file…
— @cyber_rekk, 5 days ago · 8 likes · see the post
Alternatives to cve-2026-106173
- rea — Reverse engineer programs with REA (rea.tools): native binaries, .NET assemblies, Electron/JavaScript apps, Android…
- Steal My Bitcoin — Someone has created a vulnerable PHP website, loaded it with a Bitcoin wallet, and challenged the Internet to hack…
- ultrafuzz — End-to-end agentic smart contract fuzzing and threat hunting - monad-developers/ultrafuzz
- cve.now — puts the ones that need action in one free feed, and your coding agent can check them for you.
- GitHub Docs — You can customize your profile so that other people can get a better sense of who you are and the work you do.
- security-audit-skill — I highly recommend cloudflare's security audit skill
cve-2026-106173 in numbers
- Rank on the Dev Radar: #597 of 8798
- Shared in 2 posts by 2 accounts: @DarkWebInformer, @cyber_rekk
- 25.1k views on those posts
- First seen 6 days ago, last shared 5 days ago
- Pricing seen by AGK Intelligence: open source
- Market: Security
FAQ
What is cve-2026-106173?
Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM - horizon3ai/CVE-2026-106173 It was first shared on X 6 days ago and is ranked #597 on the Dev Radar.
Is cve-2026-106173 free?
It is open source.
Who shared cve-2026-106173?
2 accounts on X, including @DarkWebInformer, @cyber_rekk, in 2 posts totalling 25.1k views.
Every post is read and classified by AGK Intelligence: what it is, which market it belongs to, and whether the link is a real tool. 31.2k posts from 5k X accounts over the last 21 days, 8.8k tools, 12 markets. New posts are collected several times an hour and the full ranking is recomputed every hour — last update 2026-10-30 20:27 UTC. Full method.