CVE-2026-106173: Path Traversal

Published Oct 13, 2026

Updated

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.

Affected Software

1 affected component

Fortinet FortiSIEM=7.5.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Fortinet FortiSIEM to a version that resolves this vulnerability.
Fixed in 7.5.1
Upgrade
Upgrade Fortinet FortiSIEM to a version that resolves this vulnerability.
Fixed in 7.6.0
Upgrade
Upgrade Fortinet FortiSOC to a version that resolves this vulnerability.
Fixed in 26.2.2
Upgrade
Upgrade Fortinet FortiSIEMCloud to a version that resolves this vulnerability.
Fixed in 25.4.1

Event History

Oct 13, 2026

CVE Published

via MITRE·05:37 PM

Data Sourced

via MITRE·05:37 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Does exploitation require authentication or user interaction?

No. The listed vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

What access could an attacker gain through successful exploitation?

Successful exploitation may allow an attacker to execute unauthorized code or commands. The impact rating indicates potential high impact to confidentiality, integrity, and availability.

Which FortiSIEM version is identified as affected?

The provided information identifies Fortinet FortiSIEM 7.5.0 as affected.