23 October 2026
Reference: CVE-2026-106173
1. What is being reported?
The report describes a 'path traversal' vulnerability in Fortinet FortiSIEM version 7.5.0. This means attackers can trick the software into accessing files or commands it shouldn’t, potentially allowing them to execute harmful code remotely without permission.
2. What this means in plain English
For small organisations using this software, it means that if the vulnerability is not fixed, hackers could take control of your IT monitoring system. This could lead to data breaches, disruption of services, or further attacks on your network.
3. Could this affect a small business?
Small businesses or charities using Fortinet FortiSIEM 7.5.0 could be affected. If you do not use this specific software, or use a different version, you are likely not at risk. Check with your IT provider to confirm.
4. What to do now
- Check if your organisation uses Fortinet FortiSIEM version 7.5.0.
- If you do, contact your IT provider or Fortinet support immediately to apply any available security updates or patches.
- Limit network access to the FortiSIEM system to trusted users and devices only.
- Monitor your systems for unusual activity and report any concerns to your IT provider.
5. Ask your IT provider
Can you confirm if our Fortinet FortiSIEM system is affected by CVE-2026-106173 and what steps are being taken to secure it?
6. Bottom line
If you use Fortinet FortiSIEM 7.5.0, act quickly to update and protect your system from this critical vulnerability.
Information based on NVD, CISA KEV, and reputable security reporting.