CVE-2026-106175: CVE-2026-106175: güvenlik açığı

Açıklama (NVD)

A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions, FortiSwitch 7.2 all versions may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.

Özet bilgiler

CVSS v3.1

2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

EPSS

%0,10 (yüzdelik 1)

CWE

CWE-415

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• fortiguard.fortinet.com
• CWE-415