CVE-2026-106173

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.

An attacker could access files outside the restricted directory and execute code, potentially leading to system compromise or data breach.

Update FortiSIEM to a version that fixes this vulnerability and restrict network access to the service.