Skip to content
NewA calmer, faster ZeroHour
VulnerabilityPoC ×44 · 1 read

CVE-2026-106173

Path traversal to remote code execution in FortiSIEM 7.5.0

CVSS 3.1
9.8 critical
EPSS
<1%p63
Published
·
Modified
Analyze CVE-2026-106173 with Vani AIImpact, affected versions, exploitation status, mitigations and detection
AI analysisSummaries by Vani AI

CVE-2026-106173 is a critical path-traversal flaw (CWE-22) in Fortinet FortiSIEM 7.5.0. A remote attacker can send specially crafted packets without authentication or user interaction and escape a restricted directory, which Fortinet says may lead to unauthorized code or command execution. Successful abuse has high impact on confidentiality, integrity, and availability (CVSS 3.1 base score 9.8). Only FortiSIEM 7.5.0 is listed as affected. It is not in CISA KEV, and no public proof-of-concept is known.

What to do: Apply the Fortinet PSIRT fix for CVE-2026-106173 on every FortiSIEM 7.5.0 system as soon as it is available, and until then do not expose the product to untrusted networks. Restrict access to trusted management networks only and watch for unexpected commands or process activity tied to specially crafted packets.

ProductAffected
Fortinet FortiSIEM7.5.0
Estimated exposure
No basis for an estimate.

Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.

Description · NVD

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.

Weakness
CWE-22
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news

4 stories