CVE-2026-106173 is a critical path traversal flaw in Fortinet FortiSIEM. An unauthenticated attacker can write files and run code through its gRPC service.

FortiSIEM 7.5.0 is affected; 7.6 and Cloud are not. A public exploit is circulating per Horizon3.

Upgrade to FortiSIEM 7.5.1 or later.

https://fortiguard.fortinet.com/psirt/FG-IR-26-180

#Detection #infosec #cybersecurity