Vulnerabilities
Products Security index
Vulnerabilities
CVE-2026-106174
Improper Locking Allows Unauthenticated DoS of FortiOS HTTPS Management Interface
CVE-2026-107656
Authentication Bypass via Alternate Channel in Fortinet FortiSandbox Allowing Unauthorized Command Execution
CVE-2026-106175
A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions, FortiSwitch 7.2 all versions may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.
CVE-2026-106172
Hard‑Coded Cryptographic Key Allows Privilege Escalation via HTTP Requests in FortiSandbox
CVE-2026-23707
SQL Injection Allowing Low‑Privilege Command Execution in Fortinet FortiAnalyzer and FortiManager
