{"schema":"vulnpedia.poc/1","cve":"CVE-2026-106173","generated":"2026-10-26T13:52:32.101Z","kev":null,"epss":{"score":0.00998,"percentile":0.62502},"cvss":{"version":"3.1","score":9.4,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C"},"has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/f4323aae2d7a","executable":false,"sourceId":"f4323aae2d7a","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-23T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f4323aae2d7a","modified":"2026-10-23T00:00:00Z","url":"https://vulncheck.com/xdb/f4323aae2d7a"}],"repositoryUrl":"https://github.com/horizon3ai/CVE-2026-106173"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/5d93dac2fb52","executable":false,"sourceId":"5d93dac2fb52","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-23T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5d93dac2fb52","modified":"2026-10-23T00:00:00Z","url":"https://vulncheck.com/xdb/5d93dac2fb52"}],"repositoryUrl":"https://github.com/tc4dy/CVE-2026-106173-PoC-Exploit"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/4a00a52aef98","executable":false,"sourceId":"4a00a52aef98","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-23T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"4a00a52aef98","modified":"2026-10-23T00:00:00Z","url":"https://vulncheck.com/xdb/4a00a52aef98"}],"repositoryUrl":"https://github.com/MRdark-ops/rce-FortiSIEM"}],"detection_sources":[],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-106173%22&type=repositories","executable":false}],"poc_candidates":[{"url":"https://github.com/horizon3ai/CVE-2026-106173","source":"poc-in-github","sourceId":"CVE-2026-106173","description":"Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM","modified":"2026-10-26T06:08:47Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-106173","url":"https://github.com/horizon3ai/CVE-2026-106173"},{"source":"poc-in-github","sourceId":"CVE-2026-106173","modified":"2026-10-26T06:08:47Z","url":"https://github.com/horizon3ai/CVE-2026-106173"}],"tags":[]},{"url":"https://github.com/0xBlackash/CVE-2026-106173","source":"poc-in-github","sourceId":"CVE-2026-106173","description":"CVE-2026-106173","modified":"2026-10-23T19:16:51Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-106173","url":"https://github.com/0xBlackash/CVE-2026-106173"},{"source":"poc-in-github","sourceId":"CVE-2026-106173","modified":"2026-10-23T19:16:51Z","url":"https://github.com/0xBlackash/CVE-2026-106173"}],"tags":[]},{"url":"https://github.com/tc4dy/CVE-2026-106173-PoC-Exploit","source":"poc-in-github","sourceId":"CVE-2026-106173","description":"CVE-2026-106173 – FortiSIEM phQueryMaster RCE (CVSS 9.8) | Red/Blue Team suite for unpatched FortiSIEM 7.5.0. 2 tools: Full Exploit (multi-primitive RCE, reverse shell, persistence, creds, readback, mass scan, Tor), Blue Team Checker (exposure detection, HTTP/2 fingerprint, reporting, audit). Only Use Ethically, Stay Legal <3","modified":"2026-10-23T19:16:52Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-106173","url":"https://github.com/tc4dy/CVE-2026-106173-PoC-Exploit"},{"source":"poc-in-github","sourceId":"CVE-2026-106173","modified":"2026-10-23T19:16:52Z","url":"https://github.com/tc4dy/CVE-2026-106173-PoC-Exploit"}],"tags":[]},{"url":"https://github.com/MRdark-ops/rce-FortiSIEM","source":"poc-in-github","sourceId":"CVE-2026-106173","description":"Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM","modified":"2026-10-23T19:16:51Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-106173","url":"https://github.com/MRdark-ops/rce-FortiSIEM"},{"source":"poc-in-github","sourceId":"CVE-2026-106173","modified":"2026-10-23T19:16:51Z","url":"https://github.com/MRdark-ops/rce-FortiSIEM"}],"tags":[]}],"test_commands":[{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-106173/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}]}