5.1Medium

CVE-2026-71407

Fortinet FortiOS; Siemens RUGGEDCOM APE1808 Published: 2026-08-12 15:19 (3 months ago)

Description

A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled.

Weakness (CWE): CWE-121

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
Fortinet	FortiOS	7.6.1 – ≤ 7.6.6
Siemens	RUGGEDCOM APE1808	0

References and patches

CPE matches (NVD) (1)

cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 7.6.1 < 7.6.7

CVSS score

5.1Medium

Source: fortinet · CVSS 3.1

Attack vector: Network
Attack complexity: High
Privileges required: None
User interaction: None
Scope: Unchanged
Confidentiality: Low
Integrity: Low
Availability: Low

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

All scores (3)

cna	CVSS 3.1	5.1Medium
psirt@fortinet.com	CVSS 3.1	5.6Medium
nvd	CVSS 3.1	8.1High

EPSS (chance of exploitation in 30 days)

0.51%

higher than 44% of all CVEs

CISA assessment (SSVC)

Exploitation: none
Automatable: no
Technical impact: total

Timeline

ID reserved2026-08-06
Published2026-08-12 15:19
Reached IP-DB2026-10-24 23:40
Last updated2026-11-10 15:49

Assigned by (CNA): fortinet
NVD status: Modified

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time

Description

Affected products and versions

References and patches

CPE matches (NVD) (1)

Recent CVEs in the same product — Fortinet (all products)