CVE-2026-106175

LOWCVSS 2.3

Description

A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions, FortiSwitch 7.2 all versions may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.

Timeline

Published:October 13th, 2026 6:17 PM

Last modified:October 14th, 2026 4:04 PM

CVSS Scoring

CVSS v3: 2.3 (LOW)

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Weaknesses (CWE)

CWE-415

References & Reports

Advisories, patches, and third-party reports

https://fortiguard.fortinet.com/psirt/FG-IR-26-182

Source: NIST NVD · Data may lag official sources by up to one minute