ZDI-26-265
MEDIUM 6.5
Published
Apr 15, 2026
Fortinet FortiWeb cgi_buf_alloc Integer Overflow Denial-of-Service Vulnerability
Fortinet
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Fortinet FortiWeb. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5.