CVE-2026-106175 - Vulnerability Details

- Local Authentication Denial of Service via Double Free in Fortinet CLI

Description

A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions, FortiSwitch 7.2 all versions may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.

Published: 2026-10-13

Score: 2.1 Low

EPSS: n/a

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Fortinet

FortiSwitch

unaffected

Version	Status	Constraints
`7.6.0`	affected	≤ 7.6.6
`7.4.0`	affected	≤ 7.4.10
`7.2.0`	affected	≤ 7.2.10

Fortinet

FortiSASE

unaffected

Version	Status	Constraints
`25.4.c`	affected	—

Fortinet

FortiPAM

unaffected

Version	Status	Constraints
`1.8.0`	affected	≤ 1.8.4
`1.7.0`	affected	≤ 1.7.2
`1.6.0`	affected	≤ 1.6.2
`1.5.0`	affected	≤ 1.5.1
`1.4.0`	affected	≤ 1.4.3
`1.3.0`	affected	≤ 1.3.1
`1.2.0`	affected	—
`1.1.0`	affected	≤ 1.1.2
`1.0.0`	affected	≤ 1.0.3

Fortinet

FortiOS

unaffected

Version	Status	Constraints
`7.6.0`	affected	≤ 7.6.7
`7.4.0`	affected	≤ 7.4.12
`7.2.0`	affected	≤ 7.2.13
`7.0.0`	affected	≤ 7.0.19

Fortinet

FortiProxy

unaffected

Version	Status	Constraints
`7.6.0`	affected	≤ 7.6.6
`7.4.0`	affected	≤ 7.4.14
`7.2.0`	affected	≤ 7.2.16
`7.0.0`	affected	≤ 7.0.23

No data.

Vendor Product Confidence Versions

Fortinet

Fortios

100%

Version	Status	Scheme	Platform
`[7.6.0,7.6.7]`	affected	semver	—
`[7.4.0,7.4.12]`	affected	semver	—
`[7.2.0,7.2.13]`	affected	semver	—
`[7.0.0,7.0.19]`	affected	semver	—

Fortinet

Fortipam

100%

Version	Status	Scheme	Platform
`[1.8.0,1.8.4]`	affected	semver	—
`[1.7.0,1.7.2]`	affected	semver	—
`[1.6.0,1.6.2]`	affected	semver	—
`[1.5.0,1.5.1]`	affected	semver	—
`[1.4.0,1.4.3]`	affected	semver	—
`[1.3.0,1.3.1]`	affected	semver	—
`1.2.0`	affected	semver	—
`[1.1.0,1.1.2]`	affected	semver	—
`[1.0.0,1.0.3]`	affected	semver	—

Fortinet

Fortiproxy

100%

Version	Status	Scheme	Platform
`[7.6.0,7.6.6]`	affected	semver	—
`[7.4.0,7.4.14]`	affected	semver	—
`[7.2.0,7.2.16]`	affected	semver	—
`[7.0.0,7.0.23]`	affected	semver	—

Fortinet

Fortisase

100%

Version	Status	Scheme	Platform
`25.4.c`	affected	generic	—

Fortinet

Fortiswitch

100%

Version	Status	Scheme	Platform
`[7.6.0,7.6.6]`	affected	semver	—
`[7.4.0,7.4.10]`	affected	semver	—
`[7.2.0,7.2.10]`	affected	semver	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

Vendor Solution

Upgrade to FortiSwitch version 8.0.0 or above Upgrade to FortiSwitch version 7.6.7 or above Upgrade to FortiProxy version 7.6.7 or above Upgrade to FortiOS version 8.0.0 or above Upgrade to upcoming FortiOS version 7.6.9 or above

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://fortiguard.fortinet.com/psirt/FG-IR-26-182

History

Tue, 13 Oct 2026 21:15:00 +0000

Type	Values Removed	Values Added
Title		Local Authentication Denial of Service via Double Free in Fortinet CLI

Tue, 13 Oct 2026 20:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 13 Oct 2026 18:00:00 +0000

Type	Values Removed	Values Added
Description		A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions, FortiSwitch 7.2 all versions may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.
First Time appeared		Fortinet Fortinet fortios Fortinet fortipam Fortinet fortiproxy Fortinet fortisase Fortinet fortiswitch
Weaknesses		CWE-415
CPEs		cpe:2.3:a:fortinet:fortiproxy:7.0.0:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.10:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.11:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.12:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.13:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.14:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.15:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.16:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.17:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.18:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.19:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.1:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.20:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.21:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.22:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.23:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.2:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.3:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.4:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.5:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.6:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.7:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.8:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.9:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.0:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.10:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.11:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.12:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.13:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.14:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.15:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.16:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.1:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.2:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.3:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.4:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.5:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.6:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.7:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.8:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.9:::::::* cpe:2.3:a:fortinet:fortiproxy:7.4.0:::::::* cpe:2.3:a:fortinet:fortiproxy:7.4.10:::::::* cpe:2.3:a:fortinet:fortiproxy:7.4.11:::::::* cpe:2.3:a:fortinet:fortiproxy:7.4.12:::::::* cpe:2.3:a:fortinet:fortiproxy:7.4.13:::::::* cpe:2.3:a:fortinet:fortiproxy:7.4.14:::::::* cpe:2.3:a:fortinet:fortiproxy:7.4.1:::::::* cpe:2.3:a:fortinet:fortiproxy:7.4.2:::::::* cpe:2.3:a:fortinet:fortiproxy:7.4.3:::::::* cpe:2.3:a:fortinet:fortiproxy:7.4.4:::::::* cpe:2.3:a:fortinet:fortiproxy:7.4.5:::::::* cpe:2.3:a:fortinet:fortiproxy:7.4.6:::::::* cpe:2.3:a:fortinet:fortiproxy:7.4.7:::::::* cpe:2.3:a:fortinet:fortiproxy:7.4.8:::::::* cpe:2.3:a:fortinet:fortiproxy:7.4.9:::::::* cpe:2.3:a:fortinet:fortiproxy:7.6.0:::::::* cpe:2.3:a:fortinet:fortiproxy:7.6.1:::::::* cpe:2.3:a:fortinet:fortiproxy:7.6.2:::::::* cpe:2.3:a:fortinet:fortiproxy:7.6.3:::::::* cpe:2.3:a:fortinet:fortiproxy:7.6.4:::::::* cpe:2.3:a:fortinet:fortiproxy:7.6.5:::::::* cpe:2.3:a:fortinet:fortiproxy:7.6.6:::::::* cpe:2.3:a:fortinet:fortisase:25.4.c:::::::* cpe:2.3:a:fortinet:fortiswitch:7.2.0:::::::* cpe:2.3:a:fortinet:fortiswitch:7.2.10:::::::* cpe:2.3:a:fortinet:fortiswitch:7.2.1:::::::* cpe:2.3:a:fortinet:fortiswitch:7.2.2:::::::* cpe:2.3:a:fortinet:fortiswitch:7.2.3:::::::* cpe:2.3:a:fortinet:fortiswitch:7.2.4:::::::* cpe:2.3:a:fortinet:fortiswitch:7.2.5:::::::* cpe:2.3:a:fortinet:fortiswitch:7.2.6:::::::* cpe:2.3:a:fortinet:fortiswitch:7.2.7:::::::* cpe:2.3:a:fortinet:fortiswitch:7.2.8:::::::* cpe:2.3:a:fortinet:fortiswitch:7.2.9:::::::* cpe:2.3:a:fortinet:fortiswitch:7.4.0:::::::* cpe:2.3:a:fortinet:fortiswitch:7.4.10:::::::* cpe:2.3:a:fortinet:fortiswitch:7.4.1:::::::* cpe:2.3:a:fortinet:fortiswitch:7.4.2:::::::* cpe:2.3:a:fortinet:fortiswitch:7.4.3:::::::* cpe:2.3:a:fortinet:fortiswitch:7.4.4:::::::* cpe:2.3:a:fortinet:fortiswitch:7.4.5:::::::* cpe:2.3:a:fortinet:fortiswitch:7.4.6:::::::* cpe:2.3:a:fortinet:fortiswitch:7.4.7:::::::* cpe:2.3:a:fortinet:fortiswitch:7.4.8:::::::* cpe:2.3:a:fortinet:fortiswitch:7.4.9:::::::* cpe:2.3:a:fortinet:fortiswitch:7.6.0:::::::* cpe:2.3:a:fortinet:fortiswitch:7.6.1:::::::* cpe:2.3:a:fortinet:fortiswitch:7.6.2:::::::* cpe:2.3:a:fortinet:fortiswitch:7.6.3:::::::* cpe:2.3:a:fortinet:fortiswitch:7.6.4:::::::* cpe:2.3:a:fortinet:fortiswitch:7.6.5:::::::* cpe:2.3:a:fortinet:fortiswitch:7.6.6:::::::* cpe:2.3:o:fortinet:fortios:7.0.0:::::::* cpe:2.3:o:fortinet:fortios:7.0.10:::::::* cpe:2.3:o:fortinet:fortios:7.0.11:::::::* cpe:2.3:o:fortinet:fortios:7.0.12:::::::* cpe:2.3:o:fortinet:fortios:7.0.13:::::::* cpe:2.3:o:fortinet:fortios:7.0.14:::::::* cpe:2.3:o:fortinet:fortios:7.0.15:::::::* cpe:2.3:o:fortinet:fortios:7.0.16:::::::* cpe:2.3:o:fortinet:fortios:7.0.17:::::::* cpe:2.3:o:fortinet:fortios:7.0.18:::::::* cpe:2.3:o:fortinet:fortios:7.0.19:::::::* cpe:2.3:o:fortinet:fortios:7.0.1:::::::* cpe:2.3:o:fortinet:fortios:7.0.2:::::::* cpe:2.3:o:fortinet:fortios:7.0.3:::::::* cpe:2.3:o:fortinet:fortios:7.0.4:::::::* cpe:2.3:o:fortinet:fortios:7.0.5:::::::* cpe:2.3:o:fortinet:fortios:7.0.6:::::::* cpe:2.3:o:fortinet:fortios:7.0.7:::::::* cpe:2.3:o:fortinet:fortios:7.0.8:::::::* cpe:2.3:o:fortinet:fortios:7.0.9:::::::* cpe:2.3:o:fortinet:fortios:7.2.0:::::::* cpe:2.3:o:fortinet:fortios:7.2.10:::::::* cpe:2.3:o:fortinet:fortios:7.2.11:::::::* cpe:2.3:o:fortinet:fortios:7.2.12:::::::* cpe:2.3:o:fortinet:fortios:7.2.13:::::::* cpe:2.3:o:fortinet:fortios:7.2.1:::::::* cpe:2.3:o:fortinet:fortios:7.2.2:::::::* cpe:2.3:o:fortinet:fortios:7.2.3:::::::* cpe:2.3:o:fortinet:fortios:7.2.4:::::::* cpe:2.3:o:fortinet:fortios:7.2.5:::::::* cpe:2.3:o:fortinet:fortios:7.2.6:::::::* cpe:2.3:o:fortinet:fortios:7.2.7:::::::* cpe:2.3:o:fortinet:fortios:7.2.8:::::::* cpe:2.3:o:fortinet:fortios:7.2.9:::::::* cpe:2.3:o:fortinet:fortios:7.4.0:::::::* cpe:2.3:o:fortinet:fortios:7.4.10:::::::* cpe:2.3:o:fortinet:fortios:7.4.11:::::::* cpe:2.3:o:fortinet:fortios:7.4.12:::::::* cpe:2.3:o:fortinet:fortios:7.4.1:::::::* cpe:2.3:o:fortinet:fortios:7.4.2:::::::* cpe:2.3:o:fortinet:fortios:7.4.3:::::::* cpe:2.3:o:fortinet:fortios:7.4.4:::::::* cpe:2.3:o:fortinet:fortios:7.4.5:::::::* cpe:2.3:o:fortinet:fortios:7.4.6:::::::* cpe:2.3:o:fortinet:fortios:7.4.7:::::::* cpe:2.3:o:fortinet:fortios:7.4.8:::::::* cpe:2.3:o:fortinet:fortios:7.4.9:::::::* cpe:2.3:o:fortinet:fortios:7.6.0:::::::* cpe:2.3:o:fortinet:fortios:7.6.1:::::::* cpe:2.3:o:fortinet:fortios:7.6.2:::::::* cpe:2.3:o:fortinet:fortios:7.6.3:::::::* cpe:2.3:o:fortinet:fortios:7.6.4:::::::* cpe:2.3:o:fortinet:fortios:7.6.5:::::::* cpe:2.3:o:fortinet:fortios:7.6.6:::::::* cpe:2.3:o:fortinet:fortios:7.6.7:::::::* cpe:2.3:o:fortinet:fortipam:1.0.0:::::::* cpe:2.3:o:fortinet:fortipam:1.0.1:::::::* cpe:2.3:o:fortinet:fortipam:1.0.2:::::::* cpe:2.3:o:fortinet:fortipam:1.0.3:::::::* cpe:2.3:o:fortinet:fortipam:1.1.0:::::::* cpe:2.3:o:fortinet:fortipam:1.1.1:::::::* cpe:2.3:o:fortinet:fortipam:1.1.2:::::::* cpe:2.3:o:fortinet:fortipam:1.2.0:::::::* cpe:2.3:o:fortinet:fortipam:1.3.0:::::::* cpe:2.3:o:fortinet:fortipam:1.3.1:::::::* cpe:2.3:o:fortinet:fortipam:1.4.0:::::::* cpe:2.3:o:fortinet:fortipam:1.4.1:::::::* cpe:2.3:o:fortinet:fortipam:1.4.2:::::::* cpe:2.3:o:fortinet:fortipam:1.4.3:::::::* cpe:2.3:o:fortinet:fortipam:1.5.0:::::::* cpe:2.3:o:fortinet:fortipam:1.5.1:::::::* cpe:2.3:o:fortinet:fortipam:1.6.0:::::::* cpe:2.3:o:fortinet:fortipam:1.6.1:::::::* cpe:2.3:o:fortinet:fortipam:1.6.2:::::::* cpe:2.3:o:fortinet:fortipam:1.7.0:::::::* cpe:2.3:o:fortinet:fortipam:1.7.1:::::::* cpe:2.3:o:fortinet:fortipam:1.7.2:::::::* cpe:2.3:o:fortinet:fortipam:1.8.0:::::::* cpe:2.3:o:fortinet:fortipam:1.8.1:::::::* cpe:2.3:o:fortinet:fortipam:1.8.2:::::::* cpe:2.3:o:fortinet:fortipam:1.8.3:::::::* cpe:2.3:o:fortinet:fortipam:1.8.4:::::::*
Vendors & Products		Fortinet Fortinet fortios Fortinet fortipam Fortinet fortiproxy Fortinet fortisase Fortinet fortiswitch
References		https://fortiguard.fortinet.com/psirt/FG-IR-26-182
Metrics		cvssV3_1 `{'score': 2.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C'}`

Subscriptions

Fortinet Fortios Fortipam Fortiproxy Fortisase Fortiswitch

MITRE

Status: PUBLISHED

Assigner: fortinet

Published: 2026-10-13T17:37:19.188Z

Updated: 2026-10-13T19:21:25.253Z

Reserved: 2026-10-06T16:19:48.874Z

Link: CVE-2026-106175

Vulnrichment

Updated: 2026-10-13T19:21:18.689Z

NVD

Status : Received

Published: 2026-10-13T18:17:14.823

Modified: 2026-10-13T20:17:16.060

Link: CVE-2026-106175

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-10-13T22:00:24Z

Weaknesses

CWE-415
Double Free

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object