What is CVE-2026-106173?

Apply the latest Fortinet FortiSIEM firmware or software update as released in the official security advisory. Monitor Fortinet's security advisories for patch availability and verification of affected versions.

Is CVE-2026-106173 known to be exploited?

It is not marked known-exploited in this record.

How should CVE-2026-106173 be mitigated?

Apply the latest Fortinet FortiSIEM firmware or software update as released in the official security advisory. Monitor Fortinet's security advisories for patch availability and verification of affected versions.

CVE-2026-106173

TThe Hacker Newsinvulnerability·Oct 21critical

Public Proof-of-Concept Exploit Released for Critical FortiSIEM Vulnerability

A critical path traversal vulnerability in Fortinet FortiSIEM, tracked as CVE-2026-106173 with a CVSS score of 9.4, has been patched. Security researchers have publicly released a proof-of-concept exploit that could allow unauthenticated attackers to execute arbitrary code or commands on affected appliances. Fortinet has issued an advisory urging users to apply the latest updates immediately.

—1m

CVE-2026-106173

Quick answers

Related News

Public Proof-of-Concept Exploit Released for Critical FortiSIEM Vulnerability