CVE-2026-106173

Fortinet FortiSIEM

Medium priority: severe, but no known exploitation

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.

In the news

• Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution · The Hacker News
• Múltiples vulnerabilidades en productos de Fortinet · INCIBE-CERT