CVE-2026-106171EPSS p52.4%

CVE-2026-106171CVE-2026-106171

Description

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6, FortiManager Cloud 7.6.2 through 7.6.6 may allow attacker to escalation of privilege via specially crafted packets

Scoring

CVSS 6.1 ()
VectorCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
EPSS0.71% probability of exploitation · percentile 52.4% · 2026-10-17T12:00:28Z
Last modified2026-10-14
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.