DeutschShown in its original language — a full translation is planned for a future version.
Fortinet FortiWeb: Mehrere Schwachstellen
view advisory published 2026-03-10
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Fortinet FortiWeb ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Code auszuführen oder einen Denial of Service zu verursachen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-30897US | — | — | ||
A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2 all versions, FortiW… | ||||
| CVE-2026-24641US | medium6.5 | — | ||
A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all… | ||||
| CVE-2026-24640US | — | — | ||
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2… | ||||
| CVE-2026-24017US | — | — | ||
An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.… | ||||
| CVE-2025-66178US | — | — | ||
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, F… | ||||
| CVE-2025-48840US | — | — | ||
An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.8, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may… | ||||
02
references
External citations — patches, advisories, analysis.
- FortiGuard PSIRT Advisory FG-IR-26-087 vom 2026-03-10external
- WID-SEC-W-2026-0662 - CSAF Versionself
- WID-SEC-2026-0662 - Portal Versionself
- FortiGuard PSIRT Advisory FG-IR-26-082 vom 2026-03-10external
- FortiGuard PSIRT Advisory FG-IR-26-088 vom 2026-03-10external
- FortiGuard PSIRT Advisory FG-IR-26-089 vom 2026-03-10external
- FortiGuard PSIRT Advisory FG-IR-26-093 vom 2026-03-10external
- FortiGuard PSIRT Advisory FG-IR-26-097 vom 2026-03-10external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan