CVE-2026-106175

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.6.0 through 7.6.7 FortiOS versions 7.4.x FortiOS versions 7.2.x FortiProxy versions 7.6.0 through 7.6.6 FortiProxy versions 7.4.x FortiProxy versions 7.2.x FortiSwitch versions 7.6.0 through 7.6.6 FortiSwitch versions 7.4.x FortiSwitch versions 7.2.x

Description A double free issue occurs in the signal handler of the newcli daemon. A local authenticated attacker can exploit this by executing crafted CLI commands, which leads to a crash of the daemon. A double free is a memory corruption flaw that occurs when an application attempts to free the same memory location twice.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.