VDB
CVE-2026-24640
CVE-2026-24640
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0.2 through 7.0.12 may allow a remote authenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands via crafted HTTP requests.
EPSS 0.04% · 14.2th percentile
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
EPSS Score
0.04%
14.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| fortinet | fortiweb | 7.0.2, 7.2.0, 8.0.0 |
| Fortinet | FortiWeb | 8.0.0, 7.6.0, 7.2.0 |
Timeline
- Mar 10, 2026 CVE Published
- Mar 11, 2026 EPSS Score
- Mar 11, 2026 CVE Updated
- Mar 12, 2026 EPSS Score
- Mar 13, 2026 EPSS Score
- Mar 14, 2026 EPSS Score
- Mar 15, 2026 EPSS Score
- Mar 16, 2026 EPSS Score
- Mar 17, 2026 EPSS Score
- Mar 17, 2026 Security Advisory
- Mar 17, 2026 Security Advisory
- Mar 17, 2026 Security Advisory
References
- https://www.fortiguard.com/psirt/FG-IR-26-078 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-096 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-098 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-080 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-088 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-094 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-092 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-090 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-081 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-095 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-093 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-083 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-087 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-079 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-086 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-077 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-082 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-097 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-085 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-091 advisory
…and 4 more