7.1High

CVE-2026-126258

Fortinet FortiOS Published: 2026-11-12 00:31 (3 days ago)

Description

A stack-based buffer overflow vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.7 may allow an unauthenticated attacker with wad port access to crash proxy or ZTNA sessions via crafted HTTP or HTTPS requests.

Weakness (CWE): CWE-121

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
Fortinet	FortiOS	8.0.0, 7.6.7

References and patches

https://fortiguard.fortinet.com/psirt/FG-IR-26-272

CVSS score

7.1High

Source: fortinet · CVSS 3.1

Attack vector: Network
Attack complexity: Low
Privileges required: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

All scores (2)

cna	CVSS 3.1	7.1High
psirt@fortinet.com	CVSS 3.1	7.5High

EPSS (chance of exploitation in 30 days)

0.58%

higher than 48% of all CVEs

Timeline

ID reserved2026-11-10
Published2026-11-12 00:31
Reached IP-DB2026-11-12 01:03
Last updated2026-11-12 22:14

Assigned by (CNA): fortinet
NVD status: Awaiting Analysis

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time

Description

Affected products and versions

References and patches

Recent CVEs in the same product — Fortinet (all products)