42 matches found
Vulnerabilities fixed in Fortinet FortiOS
Fortinet has addressed multiple vulnerabilities in FortiOS. Various vulnerabilities in FortiOS and other Fortinet products can lead to unauthorized access, network disruptions, or full system compromise. - SSLVPN: Traffic interception due to insufficient certificate validation. - Management...
CVE-2026-126258
Fortinet FortiOS versions 8.0.0 and 7.6.7 are vulnerable to a stack-based buffer overflow (CWE-121) within the WAD proxy component. This flaw allows an unauthenticated attacker with wad port access to crash proxy or ZTNA sessions by sending crafted HTTP or HTTPS requests. No specific remediation ...
PT-2026-145521
Name of the Vulnerable Software and Affected Versions FortiOS version 8.0.0 FortiOS version 7.6.7 Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to memory corruption. This...
Fortinet Fortigate Stack buffer overflow in wad (FG-IR-26-272)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-272 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
CVE-2026-126258: Fortinet FortiOS: A stack-based buffer overflow vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.7 may allow an unauthenticated…
A stack-based buffer overflow vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.7 may allow an unauthenticated attacker with wad port access to crash proxy or ZTNA sessions via crafted HTTP or HTTPS requests...
Stack buffer overflow in wad
A stack-based buffer overflow vulnerability CWE-121 in Fortinet FortiOS WAD proxy may allow an unauthenticated attacker with wad port access to crash proxy or ZTNA sessions via crafted HTTP or HTTPS requests...
WAD (Web Access Daemon) Code Execution
The vulnerability of WAD Web Access Daemon in FortiOS operating systems is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created sockets...
X-WAD: EXplainable Web Anomaly Detection
The rapid growth of web-based services, particularly API-driven architectures, reflects an increasing reliance on distributed systems, exposing sensitive data to security risks and making the adoption of automated defensive mechanisms essential. In this context, where benign traffic predominates ...
CVE-2026-71407
A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit...
EUVD-2026-57191
A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit...
CVE-2026-71407
CVE-2026-71407 is a stack-based buffer overflow (CWE-121) in the WAD daemon of Fortinet FortiOS 7.6.1 through 7.6.6 . An unauthenticated attacker who can bypass stack protection and ASLR may execute arbitrary code or commands via crafted sockets, but only if the explicit proxy is configured with ...
CVE-2026-71407
A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit...
CVE-2026-71407
A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit...
CVE-2026-71407
A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit...
CVE-2026-71407: Stack-based Buffer Overflow
A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit...
PT-2026-71065
Name of the Vulnerable Software and Affected Versions Fortinet FortiOS versions 7.6.1 through 7.6.6 Description A stack-based buffer overflow occurs in the WAD daemon when the explicit proxy is configured with Kerberos authentication and SOCKS enabled. An unauthenticated attacker can exploit this...
Stack buffer overflow in WAD
A Stack-based Buffer Overflow vulnerability CWE-121 in FortiOS explicit proxy may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with...
Fortinet Fortigate Stack buffer overflow in WAD (FG-IR-26-161)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-161 advisory. - A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an...
Buffer overread in authd and wad daemon
A buffer over-read vulnerability CWE-126 in FortiOS, FortiProxy, and FortiSASE may allow an authenticated remote attacker to return a portion of device memory in the redirect response via submitting a specially crafted request...