Double free in signal handler

FG-IR-26-182 · Fortinet · October 13, 2026

Summary

No summary from the source. Read the linked document.

What to do

FortiOS 8.0: Not Applicable FortiOS 7.6: Upgrade to upcoming 7.6.9 or above FortiOS 7.4: Migrate to a fixed release FortiOS 7.2: Migrate to a fixed release FortiOS 7.0: Migrate to a fixed release FortiProxy 7.6: Upgrade to 7.6.7 or above FortiProxy 7.4: Migrate to a fixed release FortiProxy 7.2: Migrate to a fixed release FortiProxy 7.0: Migrate to a fixed release FortiSwitch 8.0: Not Applicable FortiSwitch 7.6: Upgrade to 7.6.7 or above FortiSwitch 7.4: Migrate to a fixed release FortiSwitch 7.2: Migrate to a fixed release

Vendor fix or mitigation, quoted from the advisory.

Each CVE in this advisory

CVE	Severity	Known exploited	Exploit likelihood	Weakness
CVE-2026-106175	2.1 low	No	0.1%	Double Free (CWE-415)

Severity from the advisory (CVSS), known exploitation from CISA's catalog, exploit likelihood from EPSS (next 30 days).

Why it's on these mode pages

Maritime: Vendor table: Fortinet (network and remote-access gear used in every mode, all modes) (matched by rule)
Pipeline: Vendor table: Fortinet (network and remote-access gear used in every mode, all modes) (matched by rule)
Freight rail: Vendor table: Fortinet (network and remote-access gear used in every mode, all modes) (matched by rule)
Passenger rail and transit: Vendor table: Fortinet (network and remote-access gear used in every mode, all modes) (matched by rule)
Highway and motor carrier: Vendor table: Fortinet (network and remote-access gear used in every mode, all modes) (matched by rule)
Postal and parcel: Vendor table: Fortinet (network and remote-access gear used in every mode, all modes) (matched by rule)

Change history

October 13, 2026: Initial Publication
October 13, 2026: Initial Publication
November 9, 2026: First collected by Watch

Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com