Skip to content
brandefense.io
Request A Demo
Trending Vulnerabilities

Why it is trending

CVE-2026-106173

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.

Known-bad
  • CVSS 9.4
  • VulnCheck KEV
  • Public PoC
Buzz
34discussion, 0-100
Danger
70exploitability, 0-100
Mentions
16since 13 Oct 2026
EPSS
0.5%exploit probability
Mentions Per Day · UTCpeak 4
29 days agoToday
Where The Talk Is · by platform16 total
  • X8 mentions · 1 voices
  • GitHub4 mentions · 4 voices · 4 PoC
  • Reddit1 mentions · 1 voices
  • Dark web3 mentions · count only

    Out of 16 mentions in total. We show how many, never what was said or where.

Newest Public Posts · plain text, newest first

X

  • FortiSIEMの重大(Critical)な脆弱性CVE-2026-106173（CVSSスコア9.4）に対応するPoC（攻撃の概念実証コード）が公表された。10/13に修正されていたもの。パストラバーサルから60秒ごとに実行されるスクリプトを書き換えて任意のコードを管理者コンテキストで実行するもの。 https://t.co/ge2Xk4hHLQ

    @__kokumoto20 h agolikes 0views 577replies 0Open

  • Horizon3 released details and a PoC for CVE-2026-106173, a FortiSIEM vulnerability enabling unauthenticated remote code execution. Patch now. #FortiSIEM #Fortinet #CVE2026106173 #RCE #PoC #Horizon3 #SIEM #CyberSecurity https://t.co/twOxxVJWvr

    @Daily_CyberSec23 h agolikes 6views 614replies 0Open

  • #NØØT_Security_Alerts 🚨 #ALERT — FORTINET FORTISIEM: CRITICAL UNAUTHENTICATED VULNERABILITY COULD ENABLE REMOTE COMMAND EXECUTION October 13, 2026 DISCLOSED BY: Fortinet PSIRT PRODUCT: Fortinet FortiSIEM CVE: CVE-2026-106173 SEVERITY: CRITICAL — CVSS 9.4 WEAKNESS: CWE-22 — Path Traversal AFFECTED V…

    @Python_s_9 d agolikes 0views 72replies 0Open

  • 🚨 Upozorňujeme na závažné zranitelnosti v FortiSandbox a FortiSIEM, CVE-2026-107656 a CVE-2026-106173. Zranitelnost CVE-2026-107656 umožňuje vzdálenému neautentizovanému útočníkovi obejít autentizaci ve webovém rozhraní FortiSandbox a získat neoprávněný přístup k zařízení. Zranitelnost CVE-2026-106…

    @GOVCERT_CZ9 d agolikes 0views 472replies 0Open

  • Fortinet FortiSIEM has a critical path traversal (CVE-2026-106173, CVSS 9.8). Per Fortinet, an unauthenticated attacker may run code or commands via crafted packets. Not known to be exploited. Restrict access to TCP port 27918 and upgrade (7.5.1 for the 7.5 branch). Details: https://t.co/q8IjOZfWe4…

    @vuln_tracker9 d agolikes 2views 168replies 0Open

  • #NØØT_Security_Alerts 🚨 #ALERT — FORTINET FORTISIEM: CRITICAL UNAUTHENTICATED REMOTE CODE EXECUTION RISK October 13, 2026 DISCLOSED BY: Fortinet PSIRT PRODUCT: Fortinet FortiSIEM CVE: CVE-2026-106173 SEVERITY: CRITICAL — Fortinet CVSS 9.4 WEAKNESS: CWE-22 — Path Traversal AFFECTED VERSIONS: FortiSI…

    @Python_s_10 d agolikes 0views 60replies 0Open

  • CVE advisory: CVE-2026-106173 - fortinet: Arbitrary file write in grpc phQueryMaster. https://t.co/Dy96XqSv8c #CVE #CyberSecurity #Fortinet #FortiSIEM

    @vulnipulse10 d agolikes 0views 27replies 1Open

  • 🚨 CRITICAL — CVE-2026-106173 A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.… CVSS 9.8 🔴 No patch yet Full analysis → https://t.co/p3MNOdIUP5 #Fortinet #CyberSecurity #InfoSec

    @KaitanSecurity10 d agolikes 0views 44replies 0Open

GitHub

  • MRdark-ops/rce-FortiSIEM: Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM

    MRdark-ops/rce-FortiSIEM7 h agostars 1PoCOpen

  • tc4dy/CVE-2026-106173-PoC-Exploit: CVE-2026-106173 – FortiSIEM phQueryMaster RCE (CVSS 9.8) | Red/Blue Team suite for unpatched FortiSIEM 7.5.0. 2 tools: Full Exploit (multi-primitive RCE, reverse shell, persistence, creds, readback, mass scan, Tor), Blue Team Checker (exposure detection, HTTP/2 fi…

    tc4dy/CVE-2026-106173-PoC-Exploit30 h agostars 5PoCOpen

  • GitHub cross-source: 0xBlackash/CVE-2026-106173: CVE-2026-106173

    0xBlackash/CVE-2026-1061733 d agostars 1PoCOpen

  • GitHub cross-source: horizon3ai/CVE-2026-106173: Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM

    horizon3ai/CVE-2026-1061733 d agostars 14PoCOpen

Reddit

  • CVE-2026-106173 Deep-Dive: Fortinet FortiSIEM gRPC Path Traversal File Write to RCE — submitted by /u/scopedsecurity to r/netsec [link] [comments]

    r/netsec3 d agoOpen
Public PoC Repositories · third-party code4 links

Links are collected from public posts and are not reviewed by Brandefense. Exploit code can be unsafe or malicious: only study it in an isolated lab, and never run it against systems you do not own.

Get a morning brief and an alert the moment a critical vulnerability like this one starts trending.

Subscribe