{"vulnerability": "CVE-2026-106173", "sightings": [{"uuid": "49552afc-749c-4649-ad8e-8103e897a8ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106173", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117434868239015620", "content": "CVE-2026-106173  A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.\nhttps://www.cve.org/CVERecord?id=CVE-2026-106173https://fortiguard.fortinet.com/psirt/FG-IR-26-180#fortinet #Fortinet #FortiSIEM#CVE_2026_106173#bot", "creation_timestamp": "2026-10-13T17:51:23.520410Z"}, {"uuid": "130fe344-0b27-45a0-86b8-8afd39c9d4ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106173", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117434946407622795", "content": "Fortinet has around 11 advisories.Stand outs are \n\nCVE-2026-106173 (9.4 critical) path traversal in FortiSIEM leads to RCE \nCVE-2026-107656 (9.6 critical) authentication bypass in FortiSandbox GUI \nNo exploitation\nhttps://fortiguard.fortinet.com/psirt/FG-IR-26-180https://fortiguard.fortinet.com/psirt/FG-IR-26-185\n#fortinet #CVE #PatchTuesday", "creation_timestamp": "2026-10-13T18:12:27.620843Z"}, {"uuid": "c85ed89c-9803-4abf-9741-c0f6a6eb2c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106173", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxrtlcgkun2l", "content": "\ud83d\udea8 CVE-2026-106173 \u2014 CVSS 9.8 CRITICAL\n\nA improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-106173\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-13T20:08:59.017330Z"}, {"uuid": "aaf889fa-6ac1-4c1c-9c65-b2c845e1a438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106173", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxrza3bxri2n", "content": "CVE-2026-106173\nFortiSIEM version 7.5.0 does not properly restrict where files can be accessed, so a skilled attacker could send specially crafted network data to make the system read or write outside its intended folders.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-13T21:50:05.071516Z"}, {"uuid": "e977b88f-a691-41f1-8918-0627e796692e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106173", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117439906869194457", "content": "Fortinet has several new advisories today, one of them relates to a critical vulnerability.\nFortinet: CRITICAL: CVE-2026-106173: improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets https://app.opencve.io/cve/CVE-2026-106173 #Fortinet #infosec #vulnerability \n@cR0w Not a perfect 10, but you've been quieter recently, so I thought I'd gift you this.", "creation_timestamp": "2026-10-14T15:12:47.013826Z"}, {"uuid": "5772ffee-9fcf-4c1e-a384-871e47ab53da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-106173", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-fortinet-1", "content": "", "creation_timestamp": "2026-10-14T03:19:05.000000Z"}, {"uuid": "7f3c1cfe-2e9e-40fc-b74a-e04331cb6087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-106173", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-high-and-critical-severity-vulnerabilities-fortinet-fortisiem", "content": "", "creation_timestamp": "2026-10-14T07:02:44.000000Z"}]}