Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Tag

#path traversal

2 articles

Deep Dive

FortiSIEM gRPC Path Traversal RCE with a Public PoC (CVE-2026-106173)

FortiSIEM 7.5.0's unauthenticated gRPC service on TCP 27918 lets an attacker overwrite files for RCE; fixed in 7.5.1, public PoC, no known exploitation.

Ostorlab Team
Oct 26, 2026

Deep Dive

Postiz Full Takeover by Any Registered User (CVE-2026-115931, CVE-2026-115932, CVE-2026-115933)

In self-hosted Postiz 2.23.0 to 2.25.2 any registered user can read server files, and in 2.15.0 t...

Oct 26, 2026