A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions,… (CVE-2026-106175)
Description
CVE-2026-106175 is a double free vulnerability (CWE-415) affecting multiple versions of Fortinet FortiOS, FortiProxy, and FortiSwitch products. It allows a local authenticated attacker to crash the newcli daemon by issuing crafted CLI commands. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS score is low (2.3).
CVSS v3.1
Score 2.3low
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability is a double free flaw in Fortinet FortiOS versions 7.6.0 through 7.6.7, all versions of FortiOS 7.4 and 7.2, FortiProxy versions 7.6.0 through 7.6.6, all versions of FortiProxy 7.4 and 7.2, and FortiSwitch versions 7.6.0 through 7.6.6, all versions of FortiSwitch 7.4 and 7.2. A local authenticated attacker can exploit this by sending crafted CLI commands to the newcli daemon, causing it to crash. The vulnerability results in denial of service conditions but does not compromise confidentiality or integrity.
Potential Impact
The impact is limited to availability as the vulnerability allows crashing the newcli daemon, potentially causing denial of service. There is no impact on confidentiality or integrity. The CVSS v3.1 base score is 2.3, reflecting low severity.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Fortinet advisories for updates. In the meantime, restricting local authenticated access to trusted users may reduce risk.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-ccwm-v5qj-rgvh
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-106175"]
- Database Specific Severity
- LOW
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6acea9262cdf04f656b66fd7
Added to database: 10/13/2026, 21:56:54 UTC
Last enriched: 10/13/2026, 22:02:30 UTC
Last updated: 10/14/2026, 04:48:08 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.