Veille CVE

Jeudi 15 octobre 2026

4 CVE

Critique 0 Élevée 2 Moyenne 1 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Fortinet FortiOS » ✕
  1. CVE-2026-84393 8.1 Élevée

    Fortinet FortiOS · Fortinet FortiProxy · Siemens RUGGEDCOM APE1808

    A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure via <insert attack vector here>

  2. CVE-2026-84392 2.7 Faible

    Fortinet FortiOS · Fortinet FortiProxy · Fortinet FortiPAM · Siemens RUGGEDCOM APE1808

    A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions may allow an authenticated attacker to crash the httpsd daemon via crafted HTTP requests.

  3. CVE-2026-71408 5.3 Moyenne

    Fortinet FortiOS · Siemens RUGGEDCOM APE1808

    A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow attacker to denial of service via <insert attack vector here>

  4. CVE-2026-71407 8.1 Élevée

    Fortinet FortiOS · Fortinet FortiPAM · Fortinet FortiProxy · Siemens RUGGEDCOM APE1808

    A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled.