CVE-2026-106171
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6, FortiManager Cloud 7.6.2 th
Exploited
Not listed
EPSS
0.007
52.4th percentile
Discovered by
Third party
Vendor advisory field
Published
Oct 13, 2026
Assigned by fortinet
Description
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6, FortiManager Cloud 7.6.2 through 7.6.6 may allow attacker to escalation of privilege via specially crafted packets
Weakness: CWE-78
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Fortinet | FortiManager Check your version | Network & Security Management | cna-assigner |
Vendor-reported products (2)
- Fortinet · FortiManager
- Fortinet · FortiManager Cloud
Credit
External
Vendor remediation
Upgrade to upcoming FortiManager version 8.0.1 or above Upgrade to FortiManager version 7.6.7 or above Upgrade to upcoming FortiManager Cloud version 8.0.1 or above Upgrade to upcoming FortiManager Cloud version 7.6.7 or above