Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-106173

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacke

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: poc
  • Automatable: yes
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.

Affected versions

  • Fortinet FortiSIEM

    From 7.4.0 · through 7.4.2; From 7.3.0 · through 7.3.5; From 7.2.0 · through 7.2.7; From 7.1.0 · through 7.1.9; From 7.0.0 · through 7.0.4

References 1

fortiguard.fortinet.com