CVE-2026-106175: Double Free
A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions, FortiSwitch 7.2 all versions may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Fortinet FortiOSto a version that resolves this vulnerability.Fixed in 8.0.0 - Upgrade
Upgrade
Fortinet FortiOSto a version that resolves this vulnerability.Fixed in 7.6.9 - Upgrade
Upgrade
Fortinet FortiProxyto a version that resolves this vulnerability.Fixed in 7.6.7 - Upgrade
Upgrade
Fortinet FortiSwitchto a version that resolves this vulnerability.Fixed in 7.6.7 - Upgrade
Upgrade
Fortinet FortiSwitchto a version that resolves this vulnerability.Fixed in 8.0.0
Event History
Frequently Asked Questions
Who can exploit this issue?
Exploitation requires a local, authenticated attacker with high privileges who can submit crafted CLI commands. The stated impact is a crash of the newcli daemon.
Which deployments are affected?
Affected releases include FortiOS 7.6.0 through 7.6.7 and all FortiOS 7.4 and 7.2 versions; FortiProxy and FortiSwitch 7.6.0 through 7.6.6 and all 7.4 and 7.2 versions. The provided information does not identify unaffected fixed releases.
Does this permit remote unauthenticated compromise?
No. The supplied vector specifies local access, high privileges, and no user interaction; it identifies availability impact only, with no confidentiality or integrity impact.