CVE-2026-106173
published 2026-10-13CVE-2026-106173: A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute…
PriorityP183critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
ITWEXPLOITVulnCheck KEVInitial access
Exploited in the wild
EPSS
0.46%
38.8th percentile
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fortinet | fortinet | — | — |
| fortinet | fortisiem | — | — |
| fortinet | fortisiem | — | — |
| fortinet | fortisiem | 7.0.0 – 7.0.4 | — |
| fortinet | fortisiem | 7.1.0 – 7.1.9 | — |
| fortinet | fortisiem | 7.2.0 – 7.2.7 | — |
| fortinet | fortisiem | 7.3.0 – 7.3.5 | — |
| fortinet | fortisiem | 7.4.0 – 7.4.2 | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vulncheck9.8CRITICAL
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Fortinet
Arbitrary file write in grpc phQueryMaster
vendor_fortinet·2026-10-13·CVSS 9.8
CVE-2026-106173 [CRITICAL] CWE-22 Arbitrary file write in grpc phQueryMaster
FG-IR-26-180: Arbitrary file write in grpc phQueryMaster
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.
CVEs: CVE-2026-106173
CWEs: CWE-22
CVSS: 9.8 (critical)
Affected products: FortiSIEM, Fortinet
GHSA
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially cra
ghsa_unreviewed·2026-10-13
CVE-2026-106173 [CRITICAL] CWE-22 A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially cra
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.
VulnCheck
Fortinet FortiSIEM Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
vulncheck·2026·CVSS 9.8
CVE-2026-106173 [CRITICAL] Fortinet FortiSIEM Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Fortinet FortiSIEM Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.
Affected: Fortinet FortiSIEM
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://previdian.com/CVE-2026-106173
Exploit PoC: https://vulncheck.com/xdb/f4323aae2d7a; https://vulncheck.com/xdb/5d93dac2fb52; https://vulncheck.com/xdb/4a00a52aef98
No detection rules found.
No public exploits indexed.
Hackernews
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
blogs_hackernews·2026-10-20·CVSS 9.8
CVE-2026-106173 [CRITICAL] Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
Home
Threat Intelligence
Vulnerabilities
Cyber Attacks
Webinars
Expert Insights
Awards
Webinars
Awards
Free eBooks
About THN
Jobs
Advertise with us
## Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution.
The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially crafted packets.
Patches for the flaw were released last week by Fortinet in the following versions -
FortiSIEM 7.5.0 (Upgrade to 7.5.1 or above)
Hackernews
⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More
blogs_hackernews·2026-10-19
CVE-2026-102764 ⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More
Home
Threat Intelligence
Vulnerabilities
Cyber Attacks
Webinars
Expert Insights
Awards
Webinars
Awards
Free eBooks
About THN
Jobs
Advertise with us
## ⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More
The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to check. By the time something looks wrong, the damage may already be done.
This week had plenty of that. Trusted connections became a problem. Hardware wasn't as safe as it looked. Old bugs found new victims, and some systems were left so exposed that breaking in barely required any effort. Even AI agents crossed lines they weren't supposed to.
Some attacks were cleve
2026-10-13
Published
Exploited in the wild