Threat Pulse 62High
Critical Fortinet FortiSIEM RCE
Severity 6Status unknownconfirmedWeb servers and gateways

CSA warned of a critical vulnerability in Fortinet FortiSIEM that allows arbitrary code execution and urged immediate patching.

What to do: Oct 24: Horizon3 published a proof of concept for unauthenticated FortiSIEM remote code execution, CVE-2026-106173 (gRPC QueryResultReq handler). Expect exploitation; patch now.

· 13 days ago · github.com
Sourcesgithub.comcsa.gov.sg
On X
@CSAsingaporeverifiedOct 23, 02:57 UTC

Attackers can exploit a critical vulnerability in Fortinet FortiSIEM to execute arbitrary code. Patch immediately. 🔗: https://t.co/0OTAfp1JrV https://t.co/80pGmtskVa

Open on X
@DarkWebInformerverifiedOct 24, 20:32 UTC

PoC published for a critical unauthenticated Fortinet FortiSIEM remote code execution vulnerability; CVE-2026-106173

Open on X
Why this score

Re-scored from the verified-lane dataset (Grok severity capped by the rubric)

Back to the board

Updated Nov 5, 01:45 UTC. Refreshes on its own.

Add a threat

Paste a link to an advisory, an article or an X post. A person reads every submission before it shows; nothing posts on its own.

Share

The picture people see when the link is posted
Post on XSave picture

This picture is what X, iMessage, Slack and Facebook show under the link. It is drawn fresh from the live board: the board and chart pictures update every 10 minutes, an event picture follows that event.