Critical severity9.8NVD Advisory· Published Oct 13, 2026
CVE-2026-106173
CVE-2026-106173
Description
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
1- Arbitrary file write in grpc phQueryMasterFortinet PSIRT · Oct 13, 2026