Low severity · published Oct 13, 2026
CVE-2026-106175
A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6,…
2.3
CVSS
0.1%
EPSS
No
On KEV
Description
A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions, FortiSwitch 7.2 all versions may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FO
FortiOS · Fortinet
7.6.0 through 7.6.7; 7.4.0 through 7.4.12; 7.2.0 through 7.2.13; 7.0.0 through 7.0.19 · source: vendor
FO
FortiPAM · Fortinet
1.8.0 through 1.8.4; 1.7.0 through 1.7.2; 1.6.0 through 1.6.2; 1.5.0 through 1.5.1; 1.4.0 through 1.4.3; 1.3.0 through 1.3.1; +3 more · source: vendor
FO
FortiProxy · Fortinet
7.6.0 through 7.6.6; 7.4.0 through 7.4.14; 7.2.0 through 7.2.16; 7.0.0 through 7.0.23 · source: vendor
FO
FortiSASE · Fortinet
25.4.c · source: vendor
FO
FortiSwitch · Fortinet
7.6.0 through 7.6.6; 7.4.0 through 7.4.10; 7.2.0 through 7.2.10 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-106175
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-106175
fortiguard.fortinet.com
https://fortiguard.fortinet.com/psirt/FG-IR-26-182
More from FortiOS
9.8
CVE-2026-24858
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
9.8
CVE-2025-25249
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
9.8
CVE-2025-59718
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
9.8
CVE-2024-55591
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
9.8
CVE-2024-23113
Fortinet Multiple Products Format String Vulnerability