What happened
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.
Affected versions
FortiSIEM: 7.5.0; 7.4.0 through 7.4.2 (semver); 7.3.0 through 7.3.5 (semver); 7.2.0 through 7.2.7 (semver); 7.1.0 through 7.1.9 (semver); 7.0.0 through 7.0.4 (semver) Fixed: See vendor advisory.
Why it matters
Review the vendor advisory and exposure of the affected product to determine operational impact.
Detection & mitigation
- Apply vendor-provided updates or mitigations.
- Review affected product exposure and access logs.
Public PoC references
RepositoryAuthorFirst seenReference
SploitusUnauthenticated remote code execution in Fortinet FortiSIEM via gRPC path traversal.horizon3ai2026-10-20T12:45:02Verifiedhorizon3ai/CVE-2026-106173Unauthenticated remote code execution in Fortinet FortiSIEM via gRPC path traversal.horizon3ai2026-10-20T12:45:02VerifiedSource timeline
CVE record published by NVDView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.