{"affected":[{"defaultStatus":"unaffected","product":"FortiOS","source":"CNA: fortinet","vendor":"Fortinet","versions":[{"lessThanOrEqual":"7.6.8","status":"affected","version":"7.6.0","versionType":"semver"},{"lessThanOrEqual":"7.4.13","status":"affected","version":"7.4.0","versionType":"semver"},{"lessThanOrEqual":"7.2.14","status":"affected","version":"7.2.0","versionType":"semver"},{"lessThanOrEqual":"7.0.19","status":"affected","version":"7.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"FortiSwitch","source":"CNA: fortinet","vendor":"Fortinet","versions":[{"lessThanOrEqual":"7.6.6","status":"affected","version":"7.6.0","versionType":"semver"},{"lessThanOrEqual":"7.4.10","status":"affected","version":"7.4.0","versionType":"semver"},{"lessThanOrEqual":"7.2.10","status":"affected","version":"7.2.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"FortiProxy","source":"CNA: fortinet","vendor":"Fortinet","versions":[{"lessThanOrEqual":"7.6.6","status":"affected","version":"7.6.0","versionType":"semver"},{"lessThanOrEqual":"7.4.14","status":"affected","version":"7.4.0","versionType":"semver"},{"lessThanOrEqual":"7.2.16","status":"affected","version":"7.2.0","versionType":"semver"},{"lessThanOrEqual":"7.0.23","status":"affected","version":"7.0.0","versionType":"semver"}]},{"defaultStatus":"unknown","product":"RUGGEDCOM APE1808","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-106175","cwes":["CWE-415"],"description":"A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions, FortiSwitch 7.2 all versions may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.","epss":{"date":"2026-11-09","percentile":0.00757,"score":0.00098},"exploits":[],"kev":null,"metrics":[{"score":2.1,"severity":"low","source":"CNA: fortinet","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C","version":"3.1"}],"modifiedAt":1794314998956,"publishedAt":1791913039188,"references":[{"source":"CNA: fortinet","tags":[],"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-182"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-651988.html"}],"remediation":[{"kind":"fix","source":"CNA: fortinet","text":"Upgrade to FortiSwitch version 8.0.0 or above\nUpgrade to FortiSwitch version 7.6.7 or above\nUpgrade to FortiProxy version 7.6.7 or above\nUpgrade to FortiOS version 8.0.0 or above\nUpgrade to upcoming  FortiOS version 7.6.9 or above"}],"revision":"b7424756c47735dfd68912d7a9e066c76003d73ed537142a175ab66a3abd401c","sources":[{"modifiedAt":1794314998956,"name":"CNA: fortinet","retrievedAt":1794316388601,"url":"https://www.cve.org/CVERecord?id=CVE-2026-106175"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794316406792,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-106175"}],"ssvc":{"assessedAt":1791915336994,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2026-106175","updatedAt":1794316406792}