CVE-2026-106171: Fortinet FortiManager

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6, FortiManager Cloud 7.6.2 through 7.6.6 may allow attacker to escalation of privilege via specially crafted packets

Affected products

• Fortinet FortiManager: version 8.0.0 only; from 7.6.0, up to and including 7.6.6
• Fortinet FortiManager Cloud: from 7.6.2, up to and including 7.6.6

Published 2026-10-13. Last modified 2026-10-14.