Skip to content
fr Sign in
2.1 Low

CVE-2026-106175 A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions,…

Description

A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions, FortiSwitch 7.2 all versions may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.

Affected products and versions

Product Affected versions Fixed in
FortiSwitch 7.6 7.6.0 → 7.6.6 No fix stated
FortiSwitch 7.4 7.4.0 → 7.4.10 No fix stated
FortiSwitch 7.2 7.2.0 → 7.2.10 No fix stated
FortiSASE 25.4.c No fix stated
FortiPAM 1.8 1.8.0 → 1.8.4 No fix stated
FortiPAM 1.7 1.7.0 → 1.7.2 No fix stated
FortiPAM 1.6 1.6.0 → 1.6.2 No fix stated
FortiPAM 1.5 1.5.0 → 1.5.1 No fix stated
FortiPAM 1.4 1.4.0 → 1.4.3 No fix stated
Show the 12 other branches
Product Affected versions Fixed in
FortiPAM 1.3 1.3.0 → 1.3.1 No fix stated
FortiPAM 1.2.0 No fix stated
FortiPAM 1.1 1.1.0 → 1.1.2 No fix stated
FortiPAM 1.0 1.0.0 → 1.0.3 No fix stated
FortiOS 7.6 7.6.0 → 7.6.8 No fix stated
FortiOS 7.4 7.4.0 → 7.4.13 No fix stated
FortiOS 7.2 7.2.0 → 7.2.14 No fix stated
FortiOS 7.0 7.0.0 → 7.0.19 No fix stated
FortiProxy 7.6 7.6.0 → 7.6.6 No fix stated
FortiProxy 7.4 7.4.0 → 7.4.14 No fix stated
FortiProxy 7.2 7.2.0 → 7.2.16 No fix stated
FortiProxy 7.0 7.0.0 → 7.0.23 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiSwitch

The 9 CVEs of FortiSwitch →
CVE-2024-48887 A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to… 9.3 Critical CVE-2022-23439 A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison… 4.1 Medium CVE-2023-37936 A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through… 9.6 Critical CVE-2023-37937 An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch… 7.6 High
Track this CVE