FG-IR-26-182: Double free in signal handler
Published Oct 13, 2026
·Updated
A Double Free vulnerability [CWE-415] in FortiOS, FortiProxy and FortiSwitch may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.
Affected Software
11 affected componentsFixes available
Fortinet FortiOS>=7.6.0<=7.6.8
Fortinet FortiOS>=7.4
Fortinet FortiOS>=7.2
Fortinet FortiOS>=7.0
Fortinet FortiProxy>=7.6.0<=7.6.6
Fortinet FortiProxy>=7.4
Fortinet FortiProxy>=7.2
Fortinet FortiProxy>=7.0
Fortinet FortiSwitch>=7.6.0<=7.6.6
Fortinet FortiSwitch>=7.4
Fortinet FortiSwitch>=7.2
Event History
Oct 13, 2026
Advisory Published
via FortiGuard·12:00 AM
Data Sourced
via FortiGuard·12:00 AM
DescriptionSeverityWeaknessAffected Software