Record status Published
Identifier year (not publication year) 2026
Source publication Oct 13, 2026
Source updated Oct 13, 2026
Imported by cveboard Oct 24, 2026
CNA source text (English) A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions, FortiSwitch 7.2 all versions may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
FortiSwitch
Vendor Fortinet
Product FortiSwitch
Platforms Unknown
Default status unaffected
FortiSwitch · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
7.6.0 affectedsemver Unavailable 7.6.6 None listed 7.4.0 affectedsemver Unavailable 7.4.10 None listed 7.2.0 affectedsemver Unavailable 7.2.10 None listed
FortiSASE
Vendor Fortinet
Product FortiSASE
Platforms Unknown
Default status unaffected
FortiSASE · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
25.4.c affectedUnavailable Unavailable Unavailable None listed
FortiPAM
Vendor Fortinet
Product FortiPAM
Platforms Unknown
Default status unaffected
FortiPAM · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
1.8.0 affectedsemver Unavailable 1.8.4 None listed 1.7.0 affectedsemver Unavailable 1.7.2 None listed 1.6.0 affectedsemver Unavailable 1.6.2 None listed 1.5.0 affectedsemver Unavailable 1.5.1 None listed 1.4.0 affectedsemver Unavailable 1.4.3 None listed 1.3.0 affectedsemver Unavailable 1.3.1 None listed 1.2.0 affectedUnavailable Unavailable Unavailable None listed 1.1.0 affectedsemver Unavailable 1.1.2 None listed 1.0.0 affectedsemver Unavailable 1.0.3 None listed
FortiOS
Vendor Fortinet
Product FortiOS
Platforms Unknown
Default status unaffected
FortiOS · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
7.6.0 affectedsemver Unavailable 7.6.7 None listed 7.4.0 affectedsemver Unavailable 7.4.12 None listed 7.2.0 affectedsemver Unavailable 7.2.13 None listed 7.0.0 affectedsemver Unavailable 7.0.19 None listed
FortiProxy
Vendor Fortinet
Product FortiProxy
Platforms Unknown
Default status unaffected
FortiProxy · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
7.6.0 affectedsemver Unavailable 7.6.6 None listed 7.4.0 affectedsemver Unavailable 7.4.14 None listed 7.2.0 affectedsemver Unavailable 7.2.16 None listed 7.0.0 affectedsemver Unavailable 7.0.23 None listed