Vulnerability

CVE-2026-106173 — Fortinet FortiSIEM path traversal

critical 9.8 2 stories · 2 outlets

Impacted if

Fortinet FortiSIEM 7.5.0 · ≤ 7.4.2 · ≤ 7.3.5 +3

Path traversal · over the network · no login

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially cra

First seen by AX-NEWS 20 Oct 2026, 14:10 UTC · latest story 20 Oct 2026, 15:38 UTC. Severity: NVD, or the CVE record while the NVD has not scored it. This product uses data from the NVD API but is not endorsed or certified by the NVD.

Coverage

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
The Hacker News 20 Oct 2026, 15:38 UTC Cybersecurity

Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as…
CVE-2026-106173: FortiSIEM gRPC Path Traversal to RCE
lobste.rs 20 Oct 2026, 14:10 UTC Software Engineering

Comments