CVE-2026-106171 — Fortinet / FortiManager

CVE-2026-106171

Fortinet / FortiManager PUBLISHED

Description (CNA)

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6, FortiManager Cloud 7.6.2 through 7.6.6 may allow attacker to escalation of privilege via specially crafted packets

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiManager	affected 8.0.0; affected 7.6.0 through 7.6.6
Fortinet / FortiManager Cloud	affected 7.6.2 through 7.6.6

CWE

CWE-78

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-177

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.