Dashboard / CVE-2026-106175

CVE-2026-106175

LOW
INFO Priority: 0.00 BB Relevance: 25/100
Published: 2026-10-13 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: High
UI: None
S: Unchanged
C: None
I: None
A: Low

Description

A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions, FortiSwitch 7.2 all versions may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
Fortinet FortiOS 7.6.0

References & Advisories (1)

Bug Bounty Relevance

25 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

2.3 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

EPSS — Exploitation Probability

0.10%
Raw Score 0.000980
Percentile 0.7%
Date 2026-10-29

Intelligence Sources

mitre ref →
nvd ref →

External Links