arbitrary command execution in fgfmsd daemon
MonitorCVSS 5.3FG-IR-26-177Oct 13, 2026
Fortinet
IT in OT - Fortinet products are commonly deployed at IT/OT network boundaries
Attack path
Attack VectorAdjacent
Auth RequiredHigh
ComplexityLow
User InteractionNone needed
Summary
Command injection in fgfmd daemon
What this means
What could happen
Could allow an attacker to execute system commands on the device
Who's at risk
Organizations in critical infrastructure using Fortinet equipment
How it could be exploited
Attacker on an adjacent network segment could reach this device with privileged credentials. The attack is straightforward with no special conditions
Exploitability
Unlikely to be exploited — EPSS score 0.7%
Affected products (3)
2 with fix1 pending
ProductAffected VersionsFix Status
FortiManager8.0.08.0.1+
FortiManager7.6.0 - 7.6.67.6.7+
FortiManager Cloud7.6.2 - 7.6.6No fix yet
CVEs (1)
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/7130ec6c-2d7d-4617-b1c2-f90d7b2c1ff4Get OTPulse briefings by email
Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.