{"schema":"vulnpedia.research/1","cve":"CVE-2026-106173","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-180","tags":[],"source":"mitre","sourceId":"fortinet","modified":"2026-10-13T17:37:09.900Z","origins":[{"source":"mitre","sourceId":"fortinet","modified":"2026-10-13T17:37:09.900Z","url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-180"},{"source":"nvd","sourceId":"CVE-2026-106173","modified":"2026-10-21T04:17:07.263","url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-180"}]},{"url":"https://github.com/horizon3ai/CVE-2026-106173","tags":["exploit","XDB repository"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-21T03:56:09.329Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-21T03:56:09.329Z","url":"https://github.com/horizon3ai/CVE-2026-106173"},{"source":"nvd","sourceId":"CVE-2026-106173","modified":"2026-10-21T04:17:07.263","url":"https://github.com/horizon3ai/CVE-2026-106173"},{"source":"vulncheck-kev","sourceId":"f4323aae2d7a","modified":"2026-10-23T00:00:00Z","url":"https://github.com/horizon3ai/CVE-2026-106173"}]},{"source":"euvd","sourceId":"EUVD-2026-98968","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98968","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-98968","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98968"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-106173","modified":"2026-10-23T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-106173","modified":"2026-10-23T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://previdian.com/CVE-2026-106173","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-106173","modified":"2026-10-23T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-106173","modified":"2026-10-23T00:00:00Z","url":"https://previdian.com/CVE-2026-106173"}]},{"url":"https://vulncheck.com/xdb/f4323aae2d7a","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"f4323aae2d7a","modified":"2026-10-23T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f4323aae2d7a","modified":"2026-10-23T00:00:00Z","url":"https://vulncheck.com/xdb/f4323aae2d7a"}]},{"url":"https://vulncheck.com/xdb/5d93dac2fb52","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"5d93dac2fb52","modified":"2026-10-23T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5d93dac2fb52","modified":"2026-10-23T00:00:00Z","url":"https://vulncheck.com/xdb/5d93dac2fb52"}]},{"url":"https://github.com/tc4dy/CVE-2026-106173-PoC-Exploit","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"5d93dac2fb52","modified":"2026-10-23T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5d93dac2fb52","modified":"2026-10-23T00:00:00Z","url":"https://github.com/tc4dy/CVE-2026-106173-PoC-Exploit"}]},{"url":"https://vulncheck.com/xdb/4a00a52aef98","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"4a00a52aef98","modified":"2026-10-23T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"4a00a52aef98","modified":"2026-10-23T00:00:00Z","url":"https://vulncheck.com/xdb/4a00a52aef98"}]},{"url":"https://github.com/MRdark-ops/rce-FortiSIEM","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"4a00a52aef98","modified":"2026-10-23T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"4a00a52aef98","modified":"2026-10-23T00:00:00Z","url":"https://github.com/MRdark-ops/rce-FortiSIEM"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/horizon3ai/CVE-2026-106173","source":"poc-in-github","sourceId":"CVE-2026-106173","description":"Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM","modified":"2026-10-26T06:08:47Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-106173","url":"https://github.com/horizon3ai/CVE-2026-106173"},{"source":"poc-in-github","sourceId":"CVE-2026-106173","modified":"2026-10-26T06:08:47Z","url":"https://github.com/horizon3ai/CVE-2026-106173"}],"tags":[]},{"url":"https://github.com/0xBlackash/CVE-2026-106173","source":"poc-in-github","sourceId":"CVE-2026-106173","description":"CVE-2026-106173","modified":"2026-10-23T19:16:51Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-106173","url":"https://github.com/0xBlackash/CVE-2026-106173"},{"source":"poc-in-github","sourceId":"CVE-2026-106173","modified":"2026-10-23T19:16:51Z","url":"https://github.com/0xBlackash/CVE-2026-106173"}],"tags":[]},{"url":"https://github.com/tc4dy/CVE-2026-106173-PoC-Exploit","source":"poc-in-github","sourceId":"CVE-2026-106173","description":"CVE-2026-106173 – FortiSIEM phQueryMaster RCE (CVSS 9.8) | Red/Blue Team suite for unpatched FortiSIEM 7.5.0. 2 tools: Full Exploit (multi-primitive RCE, reverse shell, persistence, creds, readback, mass scan, Tor), Blue Team Checker (exposure detection, HTTP/2 fingerprint, reporting, audit). Only Use Ethically, Stay Legal <3","modified":"2026-10-23T19:16:52Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-106173","url":"https://github.com/tc4dy/CVE-2026-106173-PoC-Exploit"},{"source":"poc-in-github","sourceId":"CVE-2026-106173","modified":"2026-10-23T19:16:52Z","url":"https://github.com/tc4dy/CVE-2026-106173-PoC-Exploit"}],"tags":[]},{"url":"https://github.com/MRdark-ops/rce-FortiSIEM","source":"poc-in-github","sourceId":"CVE-2026-106173","description":"Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM","modified":"2026-10-23T19:16:51Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-106173","url":"https://github.com/MRdark-ops/rce-FortiSIEM"},{"source":"poc-in-github","sourceId":"CVE-2026-106173","modified":"2026-10-23T19:16:51Z","url":"https://github.com/MRdark-ops/rce-FortiSIEM"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"f4323aae2d7a","url":"https://vulncheck.com/xdb/f4323aae2d7a","cve":"CVE-2026-106173","dateAdded":"2026-10-20T12:29:09Z","modified":"2026-10-23T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/horizon3ai/CVE-2026-106173","observations":[{"dateAdded":"2026-10-20T12:29:09Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"f4323aae2d7a","modified":"2026-10-23T00:00:00Z","url":"https://vulncheck.com/xdb/f4323aae2d7a"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"5d93dac2fb52","url":"https://vulncheck.com/xdb/5d93dac2fb52","cve":"CVE-2026-106173","dateAdded":"2026-10-22T17:17:56Z","modified":"2026-10-23T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/tc4dy/CVE-2026-106173-PoC-Exploit","observations":[{"dateAdded":"2026-10-22T17:17:56Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"5d93dac2fb52","modified":"2026-10-23T00:00:00Z","url":"https://vulncheck.com/xdb/5d93dac2fb52"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"4a00a52aef98","url":"https://vulncheck.com/xdb/4a00a52aef98","cve":"CVE-2026-106173","dateAdded":"2026-10-23T16:51:52Z","modified":"2026-10-23T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/MRdark-ops/rce-FortiSIEM","observations":[{"dateAdded":"2026-10-23T16:51:52Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"4a00a52aef98","modified":"2026-10-23T00:00:00Z","url":"https://vulncheck.com/xdb/4a00a52aef98"}]}],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2026-106173","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-10-23T00:00:00Z","modified":"2026-10-23T00:00:00Z","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Fortinet","product":"FortiSIEM","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-106173","modified":"2026-10-23T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-106173","catalog":"VulnCheck KEV","kind":"report","url":"https://previdian.com/CVE-2026-106173","dateAdded":"2026-10-23T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-106173","url":"https://previdian.com/CVE-2026-106173"}]}]}