Horizon3

Horizon3 is a security research and autonomous pentesting platform, and its attack research section publishes technical analyses of notable vulnerabilities. This page focuses on CVE-2026-106173, a critical flaw in FortiSIEM, and is written for defenders and researchers who want to understand the mechanics behind the advisory.

The article explains how gRPC path traversal combined with null-byte handling allows unauthenticated arbitrary file writes, which can then be leveraged for remote code execution. It walks through the attack path and the conditions that make exploitation possible, giving readers a concrete view of the risk rather than a summary score alone.

The content is aimed at security teams, penetration testers, and IT operations staff responsible for FortiSIEM deployments or vulnerability triage. It assumes some familiarity with web protocols and exploitation concepts, so it is less suited to non-technical audiences.

Use this page as a technical reference when assessing exposure, prioritizing patching, or building detection logic. It pairs well with vendor advisories and asset inventories. Overall, it is a focused research write-up that turns a CVE entry into an actionable understanding of the attack surface.