{"metadata": {"vulnerability": "CVE-2026-106173", "count": 19, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-06T16:19:45.747Z", "date_only": false, "value": "2026-10-06T16:19:45.747Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-106173", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T17:37:09.900Z", "date_only": false, "value": "2026-10-13T17:37:09.900Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-106173", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T17:37:09.900Z", "date_only": false, "value": "2026-10-13T17:37:09.900Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / fortinet", "record": "CVE-2026-106173", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T17:51:23.520Z", "date_only": false, "value": "2026-10-13T17:51:23.520410Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117434868239015620", "record": "CVE-2026-106173", "field": "creation_timestamp", "uuid": "49552afc-749c-4649-ad8e-8103e897a8ff", "content": "CVE-2026-106173  A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.\nhttps://www.cve.org/CVERecord?id=CVE-2026-106173https://fortiguard.fortinet.com/psirt/FG-IR-26-180#fortinet #Fortinet #FortiSIEM#CVE_2026_106173#bot", "url": "https://infosec.exchange/users/cve/statuses/117434868239015620"}, {"timestamp": "2026-10-13T18:12:27.620Z", "date_only": false, "value": "2026-10-13T18:12:27.620843Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117434946407622795", "record": "CVE-2026-106173", "field": "creation_timestamp", "uuid": "130fe344-0b27-45a0-86b8-8afd39c9d4ae", "content": "Fortinet has around 11 advisories.Stand outs are \n\nCVE-2026-106173 (9.4 critical) path traversal in FortiSIEM leads to RCE \nCVE-2026-107656 (9.6 critical) authentication bypass in FortiSandbox GUI \nNo exploitation\nhttps://fortiguard.fortinet.com/psirt/FG-IR-26-180https://fortiguard.fortinet.com/psirt/FG-IR-26-185\n#fortinet #CVE #PatchTuesday", "url": "https://infosec.exchange/ap/users/117202824925377048/statuses/117434946407622795"}, {"timestamp": "2026-10-13T18:17:14Z", "date_only": false, "value": "2026-10-13T18:17:14Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5CX2-CHQQ-627M", "record": "GHSA-5CX2-CHQQ-627M", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T18:17:14.697Z", "date_only": false, "value": "2026-10-13T18:17:14.697", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-106173", "record": "FKIE_CVE-2026-106173", "field": "published"}, {"timestamp": "2026-10-13T18:30:57Z", "date_only": false, "value": "2026-10-13T18:30:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5CX2-CHQQ-627M", "record": "GHSA-5CX2-CHQQ-627M", "field": "published"}, {"timestamp": "2026-10-13T18:30:57Z", "date_only": false, "value": "2026-10-13T18:30:57Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5CX2-CHQQ-627M", "record": "GHSA-5CX2-CHQQ-627M", "field": "modified"}, {"timestamp": "2026-10-13T20:08:59.017Z", "date_only": false, "value": "2026-10-13T20:08:59.017330Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxrtlcgkun2l", "record": "CVE-2026-106173", "field": "creation_timestamp", "uuid": "c85ed89c-9803-4abf-9741-c0f6a6eb2c95", "content": "\ud83d\udea8 CVE-2026-106173 \u2014 CVSS 9.8 CRITICAL\n\nA improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-106173\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxrtlcgkun2l"}, {"timestamp": "2026-10-13T21:50:05.071Z", "date_only": false, "value": "2026-10-13T21:50:05.071516Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxrza3bxri2n", "record": "CVE-2026-106173", "field": "creation_timestamp", "uuid": "aaf889fa-6ac1-4c1c-9c65-b2c845e1a438", "content": "CVE-2026-106173\nFortiSIEM version 7.5.0 does not properly restrict where files can be accessed, so a skilled attacker could send specially crafted network data to make the system read or write outside its intended folders.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxrza3bxri2n"}, {"timestamp": "2026-10-14T03:19:05Z", "date_only": false, "value": "2026-10-14T03:19:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-fortinet-1", "record": "CVE-2026-106173", "field": "creation_timestamp", "uuid": "5772ffee-9fcf-4c1e-a384-871e47ab53da", "url": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-fortinet-1"}, {"timestamp": "2026-10-14T03:59:56.778Z", "date_only": false, "value": "2026-10-14T03:59:56.778866Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-106173", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T03:59:56.778Z", "date_only": false, "value": "2026-10-14T03:59:56.778866Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-106173", "record": "FKIE_CVE-2026-106173", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T07:02:44Z", "date_only": false, "value": "2026-10-14T07:02:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-high-and-critical-severity-vulnerabilities-fortinet-fortisiem", "record": "CVE-2026-106173", "field": "creation_timestamp", "uuid": "7f3c1cfe-2e9e-40fc-b74a-e04331cb6087", "url": "https://ccb.belgium.be/advisories/warning-multiple-high-and-critical-severity-vulnerabilities-fortinet-fortisiem"}, {"timestamp": "2026-10-14T10:51:04.836Z", "date_only": false, "value": "2026-10-14T10:51:04.836Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-106173", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T10:51:04.836Z", "date_only": false, "value": "2026-10-14T10:51:04.836Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-106173", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T15:12:47.013Z", "date_only": false, "value": "2026-10-14T15:12:47.013826Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/117439906869194457", "record": "CVE-2026-106173", "field": "creation_timestamp", "uuid": "e977b88f-a691-41f1-8918-0627e796692e", "content": "Fortinet has several new advisories today, one of them relates to a critical vulnerability.\nFortinet: CRITICAL: CVE-2026-106173: improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets https://app.opencve.io/cve/CVE-2026-106173 #Fortinet #infosec #vulnerability \n@cR0w Not a perfect 10, but you've been quieter recently, so I thought I'd gift you this.", "url": "https://infosec.exchange/users/AAKL/statuses/117439906869194457"}, {"timestamp": "2026-10-14T16:04:11.750Z", "date_only": false, "value": "2026-10-14T16:04:11.750", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-106173", "record": "FKIE_CVE-2026-106173", "field": "lastModified"}]}