Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
6108 articles · 249325 vulns · 37/41 feeds (7d)
← Back to list
9.4
CVE-2026-106173
fortinet · fortisiem

CVE-2026-106173: A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5

Description

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.

Affected Products

VendorProductVersions
fortinetfortisiem7.5.0, 7.4.0, 7.3.0, 7.2.0, 7.1.0, 7.0.0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
fortinetfortisiemcert_advisory90%

References

  • https://fortiguard.fortinet.com/psirt/FG-IR-26-180

Related News (6 articles)

Tier D
The Hacker News2d ago
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
→ No new info (linked only)
Tier E
Lobsters Security2d ago
CVE-2026-106173: FortiSIEM gRPC Path Traversal to RCE
→ No new info (linked only)
Tier E
Reddit r/netsec3d ago
CVE-2026-106173 Deep-Dive: Fortinet FortiSIEM gRPC Path Traversal File Write to RCE
→ No new info (linked only)
Tier B
BSI Advisories9d ago
[NEU] [hoch] Fortinet FortiSIEM: Mehrere Schwachstellen ermöglichen Codeausführung
→ No new info (linked only)
Tier C
VulDB9d ago
CVE-2026-106173 | Fortinet FortiSIEM up to 7.5.0 path traversal
→ No new info (linked only)
Tier A
Fortinet PSIRT10d ago
Arbitrary file write in grpc phQueryMaster
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.4 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C
CISA KEV❌ No
Actively exploited❌ No
CWECWE-22
PublishedOct 13, 2026
Last enriched9d ago
Trending Score57
Source articles6
Independent6
Info Completeness8/14
Missing: epss, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHPRE-CVE
Multiple vulnerabilities in Fortinet FortiOS, FortiManager, FortiAnalyzer, FortiMail and FortiAuthenticator allow unspecified attack
Trending: 27
MEDIUMCVE-2026-106172
CVE-2026-106172: A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 thr
Trending: 20
HIGHCVE-2025-46773
CVE-2025-46773: An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerabi
Trending: 18
MEDIUMCVE-2026-23706
CVE-2026-23706: An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerabi
Trending: 16
MEDIUMCVE-2026-23705
CVE-2026-23705: An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerabi
Trending: 16

Pin to Dashboard

Verification

State: verified
Confidence: 0%

Vulnerability Timeline

CVE Published
Oct 13, 2026
Discovered by ZDM
Oct 13, 2026