CVE-2026-71407

8.1 Élevée

Publiée le 12/08/2026 à 15:17 · Modifiée le 15/10/2026 à 04:20 · Modifiée · Source : psirt@fortinet.com

Description

A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled.

Traduire en français

Produits concernés

Fortinet FortiOS
Fortinet FortiPAM
Fortinet FortiProxy
Siemens RUGGEDCOM APE1808

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.6 Moyenne	psirt@fortinet.com	`CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L`
3.1	8.1 Élevée	nvd@nist.gov (NVD)	`CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-121

Références

https://fortiguard.fortinet.com/psirt/FG-IR-26-161 Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-127084.html

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories