← Back

CVE-2026-71407

nvd nist
Published: Aug 12, 2026Modified: Sep 8, 2026

JSON object

Loading...
8.1
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.2 / Impact: 5.9
Source: NVD

Description

A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled.

Affected (1)

Products: Fortinet: Fortios
Fortinet
1 product
Fortios
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Fortios
From 7.6.1 to 7.6.7

Related CWEs

CWE-121
Stack-based Buffer Overflow
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

References (1)

Source: psirt@fortinet.com
Vendor Advisory

Timeline

No history available yet.