EUVD-2026-22808
GHSA-m3qh-6w2c-jgrx
Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from Vendor (fortinet) · only source for this CVE.
CVSS VectorVendor: fortinet
Lifecycle Timeline
5DescriptionCVE.org
A out-of-bounds write vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow attacker to execute unauthorized code or commands via <insert attack vector here>
AnalysisAI
Out-of-bounds write in FortiWeb administrative interface enables authenticated remote code execution on web application firewall appliances. Affects FortiWeb 7.4.0-7.4.11, 7.6.0-7.6.6, and 8.0.0-8.0.3. CVSS 7.2 indicates high-privilege authenticated network attack with low complexity. No public exploit identified at time of analysis, though the incomplete advisory description ('<insert attack vector here>') suggests disclosure may be pending or sanitized. Memory corruption class (CWE-787) typically enables arbitrary code execution, confirmed by CVSS impact ratings (High C/I/A). EPSS data not available for risk probability assessment.
Technical ContextAI
CWE-787 out-of-bounds write vulnerabilities occur when software writes data beyond allocated memory boundaries, enabling memory corruption and potential code execution. FortiWeb is Fortinet's web application firewall platform deployed to protect web applications from attacks. The vulnerability affects three major version branches across administrative functions requiring high privileges (PR:H in CVSS vector). Out-of-bounds writes in network-accessible management interfaces are critical because they bypass application-layer protections and can compromise the security appliance itself. The incomplete description in Fortinet's advisory (literal placeholder text '<insert attack vector here>') suggests either premature disclosure or deliberate sanitization of attack details pending patch deployment. CPE data not provided, but affected products are Fortinet FortiWeb versions 7.4.0-7.4.11, 7.6.0-7.6.6, and 8.0.0-8.0.3.
RemediationAI
Organizations should immediately consult Fortinet advisory FG-IR-26-127 at https://fortiguard.fortinet.com/psirt/FG-IR-26-127 for patch availability and upgrade instructions. Based on affected version ranges, patched releases would typically be FortiWeb 8.0.4 or later, 7.6.7 or later, and 7.4.12 or later, though exact fix versions must be confirmed from the vendor advisory as the published description is incomplete. Until patching is complete, restrict administrative access to FortiWeb management interfaces using IP allowlisting, enforce multi-factor authentication for all administrative accounts, monitor for unauthorized administrative activity, and review admin account privileges following least-privilege principles. Organizations unable to patch immediately should consider isolating FortiWeb management interfaces on dedicated networks unreachable from untrusted zones.
Fortinet FortiWeb contains a relative path traversal allowing unauthenticated attackers to execute administrative comman
Fortinet FortiWeb contains an authenticated OS command injection allowing privilege escalation to execute unauthorized c
A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.
Arbitrary file write and folder deletion in Fortinet FortiManager, FortiOS, and FortiProxy is possible via a path traver
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0
An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version
Authentication bypass in Fortinet FortiWeb (versions 7.0.0-7.0.12, 7.2.0-7.2.12, 7.4.0-7.4.11, 7.6.0-7.6.6, and 8.0.0-8.
Authentication bypass in Fortinet FortiWeb 8.0.0, 7.6.0-7.6.4, and 7.4.0-7.4.9 allows unauthenticated remote attackers t
Multiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.1
A stack-based buffer overflow in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows attac
Privilege escalation via path traversal affects multiple Fortinet appliances - FortiWeb (6.4, 7.0, 7.2, 7.4.0-7.4.4, 7.6
Cross-site request forgery (CSRF) vulnerability in Fortinet FortiWeb before 5.5.3 allows remote attackers to hijack the
Same weakness CWE-787 – Out-of-bounds Write
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today