CVE-2026-106173

Summary

A path traversal vulnerability in Fortinet FortiSIEM 7.5.0 allows attackers to execute unauthorized code or commands by crafting specially formatted packets. This critical flaw enables arbitrary file access and command execution beyond the intended directory boundaries.

Exploitability

Exploitation is likely straightforward with minimal preconditions, requiring only network access to send crafted packets to the vulnerable service.

Blast radius

The vulnerability could impact organizations using FortiSIEM 7.5.0 for security information and event management, potentially allowing attackers to execute arbitrary commands on the system with full privileges.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to FortiSIEM 7.5.1 or later to remediate this path traversal vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.