CVE-2026-106175

Published: Oct 13, 2026Modified: Oct 14, 2026

2.3

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Exploitability: 0.8 / Impact: 1.4

Source: psirt@fortinet.com (Secondary)

Description

A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions, FortiSwitch 7.2 all versions may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.

Related CWEs

CWE-415

Double Free

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

References (1)

https://fortiguard.fortinet.com/psirt/FG-IR-26-182

Source: psirt@fortinet.com

Timeline

No history available yet.