CVE-2026-24641

Fortinet FortiWeb contains a NULL pointer dereference (CWE-476) that can crash the HTTP daemon. Affected products/versions: FortiWeb 8.0.0–8.0.2; 7.6.0–7.6.6; 7.4 All; 7.2 All; 7.0 All. An authenticated attacker can trigger via crafted HTTP requests. Impact: Availability loss (LOW per CVSS 3.1), ...

PT-2025-32883

Name of the Vulnerable Software and Affected Versions Fortinet FortiWeb versions 7.0 through 7.6 Fortinet FortiWeb versions 7.6.3 and below Fortinet FortiWeb versions 7.4.7 and below Fortinet FortiWeb versions 7.2.10 and below Fortinet FortiWeb versions 7.0.10 and below Description An improper...