Double free in signal handler
CVSSv3 Score: 2.1 A Double Free vulnerability [CWE-415] in FortiOS, FortiProxy and FortiSwitch may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands. Revised on 2026-10-13 00:00:00
Read at Fortinet PSIRT Advisories
- Vendor
- Fortinet
- Product
- FortiOS / FortiGate, FortiProxy, FortiSwitch / FortiAP
- CVSS v3.0
- 2.1
- Exposure class
- Edge / VPN / firewall, Mobile OS
Why it ranks 26 (Notable)
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Fortinet)
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Fortinet PSIRT Advisories (fortiguard.fortinet.com)