PT-2026-24246 · Fortinet · Fortiweb

J. Liu + 1 · Publicado 2026-03-10 · Atualizado 2026-03-17 · CVE-2026-24641

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Fortinet FortiWeb versions 7.0 through 8.0.2 Fortinet FortiWeb version 7.2 Fortinet FortiWeb version 7.4 Fortinet FortiWeb versions 7.6.0 through 7.6.6 Fortinet FortiWeb version 8.0

Description The software contains a NULL pointer dereference issue [CWE-476]. An authenticated attacker can potentially cause the HTTP daemon to crash by sending specially crafted HTTP requests. The issue affects multiple major versions of the software.

Recommendations FortiWeb versions prior to 8.0.2 are affected.

Correção

DoS

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

BDU:2026-03215

CVE-2026-24641

Produtos afetados

Fortiweb

Referências · 8

• https://fortiguard.fortinet.com/psirt/FG-IR-26-089 · Aviso do Fabricante
• https://twitter.com/0dayPublishing/status/2032104092860907574 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2033994309553492073 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-24641 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-24641 · Nota de Segurança
• https://t.me/cveNotify/155359 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2026-03215 · Nota de Segurança
• https://twitter.com/dailycve/status/2032276261360325013 · Publicação no Twitter