
Public exploit released for unauthenticated FortiSIEM RCE (CVE-2026-106173)
Horizon3.ai’s proof of concept writes files via unauthenticated gRPC on port 27918; 7.5.1 fixes 7.5.0, and 7.6 is unaffected.
4 stories, newest first · one card per story

Horizon3.ai’s proof of concept writes files via unauthenticated gRPC on port 27918; 7.5.1 fixes 7.5.0, and 7.6 is unaffected.

Horizon3.ai's GitHub PoC targets FortiSIEM 7.5.0 over TCP 27918; Fortinet advises 7.5.1 or later.

Horizon3.ai shows a gRPC path traversal on port 27918 that overwrites a cron-run Redis health script.

phQueryMaster on tcp/27918 accepts any client, and a crafted query id can overwrite a cron-run script.
Today 1.2K readers · 1.8K views · 1.4K reads · all time 160K views