CVE-2026-24640

A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0.2 through 7.0.12 may allow a remote authenticated attacker who can bypass stack protection a...

CVE-2026-24640

Fortinet FortiWeb CVE-2026-24640 is a stack-based buffer overflow (CWE-121) exploitable via crafted HTTP requests. A remote authenticated attacker who can bypass stack protections and ASLR may execute arbitrary code. Affected: FortiWeb 8.0.0–8.0.2; 7.6.0–7.6.6; 7.4 (all); 7.2 (all); 7.0.2–7.0.12....

CVE-2026-24641

CVE-2026-24641 describes a NULL pointer dereference in Fortinet FortiWeb that can crash the HTTP daemon via crafted HTTP requests. Affected: FortiWeb 8.0.0–8.0.2; 7.6.0–7.6.6; 7.4 (all versions); 7.2 (all versions); 7.0 (all versions). Impact: availability disruption (HTTP daemon crash) with auth...

CVE-2026-24640

A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0.2 through 7.0.12 may allow a remote authenticated attacker who can bypass stack protection a...

CVE-2026-24641

A NULL Pointer Dereference vulnerability CWE-476 vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow an authenticated attacker to crash the HTTP daemon via crafted HTTP...

CVE-2026-24017

An Improper Control of Interaction Frequency vulnerability CWE-799 vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow a remote unauthenticated attacker to bypas...

CVE-2026-24017

CVE-2026-24017 affects Fortinet FortiWeb devices: 8.0.0–8.0.2, 7.6.0–7.6.5, 7.4.0–7.4.10, 7.2.0–7.2.11, and 7.0.0–7.0.11. It is an improper control of interaction frequency (CWE-799) that can let a remote unauthenticated attacker bypass the authentication rate-limit via crafted requests. Impact s...

CVE-2026-24017

An Improper Control of Interaction Frequency vulnerability CWE-799 vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow a remote unauthenticated attacker to bypas...

CVE-2025-48840

An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.8, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote unauthenticated attacker to bypass hostname restrictions via a specially crafted request...

CVE-2025-48840

An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.8, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote unauthenticated attacker to bypass hostname restrictions via a specially crafted request...

CVE-2025-48840

CVE-2025-48840 affects Fortinet FortiWeb: an authentication bypass by spoofing via hostname restrictions. Vulnerable are FortiWeb versions 7.6.0–7.6.3, 7.4.0–7.4.8, and all 7.2 and all 7.0 versions. The issue allows a remote unauthenticated attacker to bypass hostname restrictions through a craft...

CVE-2026-30897

A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote authenticated attacker who can bypass stack protection and ASLR to execute...

CVE-2026-30897

CVE-2026-30897 concerns a stack-based buffer overflow in Fortinet FortiWeb, affecting FortiWeb versions 8.0.0–8.0.3, 7.6.0–7.6.6, 7.4.0–7.4.11, and 7.2 (all versions). An authenticated remote attacker who can bypass stack protections and ASLR can exploit crafted HTTP requests to achieve arbitrary...

CVE-2026-30897

A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote authenticated attacker who can bypass stack protection and ASLR to execute...

CVE-2026-30897

A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote authenticated attacker who can bypass stack protection and ASLR to execute...

PT-2026-24250

🚨 CVE-2026-30897 A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote authenticated attacker who can bypass stack protection and AS...

PT-2026-24246

Name of the Vulnerable Software and Affected Versions Fortinet FortiWeb versions 7.0 through 8.0.2 Fortinet FortiWeb version 7.2 Fortinet FortiWeb version 7.4 Fortinet FortiWeb versions 7.6.0 through 7.6.6 Fortinet FortiWeb version 8.0 Description The software contains a NULL pointer dereference...

PT-2026-24245

Name of the Vulnerable Software and Affected Versions Fortinet FortiWeb versions 7.0.2 through 7.0.12 Fortinet FortiWeb versions 7.2 all versions Fortinet FortiWeb versions 7.4 all versions Fortinet FortiWeb versions 7.6.0 through 7.6.6 Fortinet FortiWeb versions 8.0.0 through 8.0.2 Description A...

PT-2026-24243

Name of the Vulnerable Software and Affected Versions Fortinet FortiWeb versions 7.0.0 through 7.0.11 Fortinet FortiWeb versions 7.2.0 through 7.2.11 Fortinet FortiWeb versions 7.4.0 through 7.4.10 Fortinet FortiWeb versions 7.6.0 through 7.6.5 Fortinet FortiWeb versions 8.0.0 through 8.0.2...

PT-2026-24236

Name of the Vulnerable Software and Affected Versions Fortinet FortiWeb versions 8.0.0 through 8.0.1 Fortinet FortiWeb versions 7.6.0 through 7.6.5 Fortinet FortiWeb versions 7.4.0 through 7.4.11 Fortinet FortiWeb versions 7.2.0 through 7.2.12 Fortinet FortiWeb versions 7.0.0 through 7.0.12...