CVE-2026-106171

No fix known EPSS <1%CVSS 5.3

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6, FortiManager Cloud 7.6.2 through 7.6.6 may allow attacker to escalation of privilege via specially crafted packets

Published 2026-10-13 · CVE record · OSV

Products: Fortinet FortiManager, Fortinet FortiManager Cloud