CVE-2026-40688

| EUVD-2026-22808 HIGH
2026-04-14 [email protected] GHSA-m3qh-6w2c-jgrx
Buffer Overflow Memory Corruption Fortinet
7.2
CVSS 3.1
Share

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
Analysis Generated
Apr 15, 2026 - 01:12 vuln.today

DescriptionNVD

A out-of-bounds write vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow attacker to execute unauthorized code or commands via <insert attack vector here>

AnalysisAI

Out-of-bounds write in FortiWeb administrative interface enables authenticated remote code execution on web application firewall appliances. Affects FortiWeb 7.4.0-7.4.11, 7.6.0-7.6.6, and 8.0.0-8.0.3. …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: inventory all FortiWeb deployments and document versions (7.4.0-7.4.11, 7.6.0-7.6.6, 8.0.0-8.0.3); disable or restrict network access to administrative interfaces via firewall rules to non-essential personnel only. Within 7 days: implement strict administrative account controls (enforce MFA, audit active admin sessions, disable unused accounts) and monitor FortiWeb logs for abnormal authentication patterns. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Share

CVE-2026-40688 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy