PT-2026-24250 · Fortinet · Fortiweb
Publicado
2026-03-10
·
Atualizado
2026-03-18
·
CVE-2026-30897
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Fortinet FortiWeb versions 7.0 through 7.2
Fortinet FortiWeb versions 7.4.0 through 7.4.11
Fortinet FortiWeb versions 7.6.0 through 7.6.6
Fortinet FortiWeb versions 8.0.0 through 8.0.3
Description
A stack-based buffer overflow exists in Fortinet FortiWeb. Successful exploitation may allow a remote authenticated attacker to bypass stack protection and Address Space Layout Randomization (ASLR) and execute arbitrary code or commands via crafted HTTP requests. The vulnerability is triggered by specially crafted HTTP requests that cause a buffer overflow on the stack.
Recommendations
FortiWeb versions 7.0: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
FortiWeb versions 7.2: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
FortiWeb versions 7.4.0 through 7.4.11: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
FortiWeb versions 7.6.0 through 7.6.6: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
FortiWeb versions 8.0.0 through 8.0.3: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Stack Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Fortiweb