Veille CVE

Semaine du 10 août au 16 août 2026

3 CVE

  1. CVE-2026-71408 5.3 Moyenne

    Fortinet FortiOS · Siemens RUGGEDCOM APE1808

    A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow attacker to denial of service via <insert attack vector here>

  2. CVE-2026-71407 8.1 Élevée

    Fortinet FortiOS · Fortinet FortiPAM · Fortinet FortiProxy · Siemens RUGGEDCOM APE1808

    A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled.

  3. CVE-2026-70466 5.3 Moyenne

    Fortinet FortiWeb · Fortinet FortiOS

    A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control via <insert attack vector here>