CVE-2026-106173

Vendor

Fortinet

Product

FortiSIEM

CVSS

9.8

EPSS

0.010 (p63)

Exposure class

Network management

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 41
   CVE NVD 18d ago

   A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to…

   A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.

   CVSS 9.8 CVE-2026-106173 Fortinet
2. 25
   Research Horizon3 11d ago

   CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE

   Horizon3 researchers analyze CVE-2026-106173, a critical Fortinet FortiSIEM vulnerability affecting an unauthenticated gRPC service. The deep-dive explains how path traversal and null-byte handling enable arbitrary file writes…

   CVE-2026-106173 Fortinet
3. 22
   CCCS advisory CCCS 8d ago

   Fortinet security advisory (AV26-1037)

   CVE-2026-106173 Fortinet