Is CVE-2026-106171 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-106171?

CVE-2026-106171 has a CVSS v3 severity of MEDIUM (6.1).

Back

CVE-2026-106171

Description

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6, FortiManager Cloud 7.6.2 through 7.6.6 may allow attacker to escalation of privilege via specially crafted packets