CVE-2026-106173
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially cra
Fortinet FortiSIEMNetwork & edge
CVSS
9.4CriticalExploitationExploitation reported4 outlets report it, first 20 Oct 2026. Not yet in the KEV catalogReports
Exploit odds (EPSS)0.46%Chance of exploitation activity in the next 30 days, higher than 38% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Timeline
- 13 Oct 2026, 17:37 UTCPublishedCVE List
- 20 Oct 2026, 12:34 UTCFirst reportHorizon3.ai
- 20 Oct 2026, 15:38 UTCExploit code publicThe Hacker News
- 23 Oct 2026, 16:06 UTCFirst reported exploitedBluesky: exploited in the wild
- NowNot on CISA's known exploited list yet
Reports 4
One outlet report exploitation. Reports are not confirmation; each links to its source.
- @cyfar.ca: ~Cybergcca~ CVE-2026-106173 and CVE-2026-114625 are reportedly exploited in the wild; patch affected systems. - IOCs: CVE-2026-106173, CVE-2026-114625 - #Arista #CVE #Fortinet #ThrBluesky: exploited in the wild, 23 Oct 2026Exploitation reported
- Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code ExecutionThe Hacker News, 20 Oct 2026Exploit code
- CVE-2026-106173 Deep-Dive: Fortinet FortiSIEM gRPC Path Traversal File Write to RCEr/netsec, 20 Oct 2026
- CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCEHorizon3.ai, 20 Oct 2026
Description
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.
Text from CVE List
Affected versions 6
- FortiSIEMaffected: 7.5.0CVE List
- FortiSIEMaffected: 7.4.0 through 7.4.2CVE List
- FortiSIEMaffected: 7.3.0 through 7.3.5CVE List
- FortiSIEMaffected: 7.2.0 through 7.2.7CVE List
- FortiSIEMaffected: 7.1.0 through 7.1.9CVE List
- FortiSIEMaffected: 7.0.0 through 7.0.4CVE List