CVE-2026-106175

LOW

A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all v...

Affects 0 products across 1 vendor.

CVSS 3.12.3
EPSS0.1%
Percentile1th
PatchUnknown
CVSS Vector — Plain English Requires local access, low complexity, high privileges required, no user interaction needed, impact contained to the vulnerable component, no confidentiality impact, no integrity impact.
CWE Weakness Definitions
CWE-415: CWE-415
◆ AI Analysis — automated analysis, not human-reviewed

A low severity vulnerability (CVE-2026-106175) affects the target system. A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6...

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2026-106175?
A low severity vulnerability (CVE-2026-106175) affects the target system. A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6...
What is the CVSS score for CVE-2026-106175?
CVE-2026-106175 has CVSS 2.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L. EPSS: 0.1%.
Is CVE-2026-106175 actively exploited?
No confirmed active exploitation of CVE-2026-106175 as of 2026-10-16.
How do I remediate CVE-2026-106175?
Advisory: https://fortiguard.fortinet.com/psirt/FG-IR-26-182
What systems are affected by CVE-2026-106175?
CVE-2026-106175 affects Fortinet.
Vulnerability Details
CVE IDCVE-2026-106175
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Published2026-10-13
Last Modified2026-10-14
ICS Relevance55%
Weakness (CWE)
CWE-415
SourceNVD
Official Description

A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions, FortiSwitch 7.2 all versions may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.

Source: NIST NVD / MITRE CVE Database

Affected Products
VendorProductAffected Versions
Fortinet — —
Fortinet Fortios ≥ 7.0.0, ≤ 7.0.19 ≥ 7.2.0, ≤ 7.2.13 ≥ 7.4.0, ≤ 7.4.12 ≥ 7.6.0, ≤ 7.6.7
Fortinet Fortipam 1.2.0 ≥ 1.0.0, ≤ 1.0.3 ≥ 1.1.0, ≤ 1.1.2 ≥ 1.3.0, ≤ 1.3.1 ≥ 1.4.0, ≤ 1.4.3 ≥ 1.5.0, ≤ 1.5.1
+3 more≥ 1.6.0, ≤ 1.6.2 ≥ 1.7.0, ≤ 1.7.2 ≥ 1.8.0, ≤ 1.8.4
Fortinet Fortiproxy ≥ 7.0.0, ≤ 7.0.23 ≥ 7.2.0, ≤ 7.2.16 ≥ 7.4.0, ≤ 7.4.14 ≥ 7.6.0, ≤ 7.6.6
Fortinet Fortiswitch ≥ 7.2.0, ≤ 7.2.10 ≥ 7.4.0, ≤ 7.4.10 ≥ 7.6.0, ≤ 7.6.6
Remediation
View Vendor Advisory →
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 7 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
Related CVEs affecting Fortinet
CVE-2005-3057 10.0 The FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and ot... CVE-2026-26084 9.9 A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 throug... CVE-2026-104286 9.8 An improper limitation of a pathname to a restricted directory ('path travers... CVE-2025-64446 9.8 A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.... CVE-2025-25257 9.8 An improper neutralization of special elements used in an SQL command ('SQL I...
View all Fortinet CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →