CVE-2026-71407

Fortinet FortiOS 7.6.1–7.6.6 contains a Stack-based Buffer Overflow (CWE-121) in the WAD daemon. An unauthenticated attacker who can bypass stack protection and ASLR could execute arbitrary code or commands via crafted sockets, but only when the explicit proxy is configured with Kerberos authenti...