Vulnerability intelligence

CVE-2026-106173

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.

CVSS Score

9.4

Critical

EPSS — Exploit Probability

—

Awaiting FIRST.org data · checked 2026-10-13

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories

NVD entry PoC / advisory

1 article across 1 outlet · first covered Oct 13, 2026 · latest Oct 13, 2026

Coverage timeline

Fortinet Patches Critical Flaws Enabling Unauthenticated Remote Attacks
securityonline.info · Oct 13, 2026

Related CVEs — Fortinet

CVE-2025-46773 CVE-2025-57739 CVE-2026-39808KEV CVE-2026-104286KEV CVE-2018-13379KEV CVE-2022-42475KEV CVE-2023-27997KEV CVE-2024-21762KEV