CVE-2026-106173Vulnerability
Reported by 4 independent sources · first reported by SecurityWeek · last reported
Last reported 4 days ago
higher than 38% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
5 reports, newest first · the exact sentence from each-
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution“The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially crafted packets.”
-
CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE“CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE”
-
⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More“…26-110005 (Komodo Periphery Agent), CVE-2026-16753 (Lowcoder), CVE-2026-104937 (Shopware), CVE-2026-107656 (Fortinet FortiSandbox), CVE-2026-106173 (Fortinet FortiSIEM), CVE-2026-108184, CVE-2026-108185, CVE-2026-53420, CVE-2026-53418 (Zoom), CVE-2026-107815, CVE-2026-107821, CVE…”
-
Múltiples vulnerabilidades en productos de Fortinet“CVE-2026-106173: vulnerabilidad de path traversal en el componente gRPC phQueryMaster de FortiSIEM.”
-
Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products“…wo critical-severity issues in FortiSIEM and FortiSandbox GUI that could allow unauthenticated attackers to execute arbitrary code (CVE-2026-106173) and bypass authentication (CVE-2026-107656).”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-107656, CVE-2026-104935, CVE-2025-64155, CVE-2026-34073, CVE-2021-36260, CVE-2026-83498, CVE-2026-74580, CVE-2026-79724, CVE-2026-85025, CVE-2026-81204, CVE-2024-23108, CVE-2026-103947, CVE-2026-103946, CVE-2026-106126, CVE-2026-14814, CVE-2026-16301, CVE-2026-92883, CVE-2026-97229, CVE-2026-85947, CVE-2026-85948
Thanks — we review every report.