CVE-2026-106171

MEDIUM
6.1CVSS v3
—CVSS v2
0.71% EPSS (exploit probability)
CWE-78CWE

Description

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6, FortiManager Cloud 7.6.2 through 7.6.6 may allow attacker to escalation of privilege via specially crafted packets

CVSS v3 vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Affected routers (0)

No routers currently mapped to this CVE in our database.

External references