arbitrary command execution in fgfmsd daemon
FG-IR-26-177
Summary
CVSSv3 Score:
9.8
CVE-2026-109618PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
Revised on 2026-10-21 00:00:00
Products covered
A separate affected-products list was not included in the collected bulletin.
Remediation
Separate remediation guidance was not included in the collected bulletin.
CVEs in this advisory 2
Updates
- Published by Fortinet
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.