Skip to content
Heist/ feed
Critical

CVE-2026-106173

Type: advisorySource: Official CVE List1 source record

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.

Announced Source revision 1
Original source ↗

CVE-2026-106173

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-106173

FortiSIEM

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "cpes": [
      "cpe:2.3:a:fortinet:fortisiem:7.5.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.4.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.4.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.4.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.3.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.3.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.3.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.3.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.3.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.3.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.2.7:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.2.6:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.2.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.2.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.2.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.2.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.2.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.2.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.1.9:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.1.8:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.1.7:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.1.6:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.1.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.1.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.1.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.1.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.1.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.1.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.0.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.0.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.0.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.0.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.0.0:*:*:*:*:*:*:*"
    ],
    "vendor": "Fortinet",
    "product": "FortiSIEM",
    "versions": [
      {
        "status": "affected",
        "version": "7.5.0"
      },
      {
        "status": "affected",
        "version": "7.4.0",
        "versionType": "semver",
        "lessThanOrEqual": "7.4.2"
      },
      {
        "status": "affected",
        "version": "7.3.0",
        "versionType": "semver",
        "lessThanOrEqual": "7.3.5"
      },
      {
        "status": "affected",
        "version": "7.2.0",
        "versionType": "semver",
        "lessThanOrEqual": "7.2.7"
      },
      {
        "status": "affected",
        "version": "7.1.0",
        "versionType": "semver",
        "lessThanOrEqual": "7.1.9"
      },
      {
        "status": "affected",
        "version": "7.0.0",
        "versionType": "semver",
        "lessThanOrEqual": "7.0.4"
      }
    ],
    "defaultStatus": "unaffected"
  }
]
Related CVEs
CVE-2026-106173

Source reference: /cveMetadata/cveId

Publisher severity

critical

Source reference: /containers/cna/metrics

Event
#45051 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement