2 vulnerabilities across 2 products scored HIGH or above on October 27, 2026.

  • 🟠 HIGH: 2

🟠 [HIGH] fortinet/fortios

1 CVE | CVSS 3.1: 7.5 | AAS 9.3

  • cpe:2.3:a:fortinet:fortios:*:*:*:*:*:*:*:* (>= 7.6.4, < 7.6.7)
  • cpe:2.3:a:fortinet:fortios:*:*:*:*:*:*:*:* (>= 8.0.0, < 8.0.1)

Fortinet FortiOS — HTTPS Management Interface Denial of Service

Fortinet has disclosed one high-severity vulnerability (CVE-2026-106174, CVSS 7.5) affecting FortiOS versions 8.0.0 and 7.6.4 through 7.6.6, where an improper locking flaw allows an unauthenticated remote attacker to cause a denial of service against the HTTPS management interface using crafted HTTP requests. Organizations running affected FortiOS versions with management interfaces exposed to the network should treat this as urgent, as the vulnerability is considered exploitable and requires no authentication. Administrators should consult the vendor advisory at fortiguard.fortinet.com/psirt/FG-IR-26-181, apply available patches immediately, and restrict management interface access to trusted networks as a mitigating control.

Vendor Advisory

🟠 [HIGH] themeum/kirki_–_freeform_page_builder,website_builder&_customizer

1 CVE | CVSS 3.1: 8.8 | AAS 9.1

  • cpe:2.3:a:themeum:kirki_freeform_page_builder_website_builder_customizer:*:*:*:*:*:*:*:* (< 6.2.6)

Themeum Kirki — Privilege Escalation via PHP Object Injection

The Kirki WordPress plugin (versions up to and including 6.2.5) is affected by one high-severity vulnerability (CVE-2026-75891, CVSS 8.8) that allows authenticated attackers with as little as Subscriber-level access to escalate privileges through PHP Object Injection in the kirki_post_apis() AJAX dispatcher, which lacks a proper capability check and deserializes untrusted input, enabling attackers to overwrite administrator credentials via a known POP chain. Any WordPress site running the Kirki page builder plugin should treat this as critical given the low barrier to exploitation — any authenticated user, including basic subscribers, can compromise the site. Administrators should immediately update to a patched version via the WordPress plugin repository, audit user accounts for unauthorized changes, and review the changeset at the vendor advisory link for remediation details.

Vendor Advisory