Riskcovery

CVE-2026-71407

State
Published
Severity
5.1 Medium
Published
Aug 12, 2026
Updated
Oct 15, 2026
Reserved
Aug 6, 2026

Read the record on cve.org

Description

A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled.

Scores

CVSSScoreVectorSource
3.15.1 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:Cfortinet

Weaknesses

  • CWE-121 Execute unauthorized code or commands

Affected Products

ProductVersions
FortiOSFortinet
  • 7.6.1 through 7.6.6Affected
FortiPAMFortinet
  • 1.8.0 through 1.8.4Affected
  • 1.7.0 through 1.7.2Affected
  • 1.6.0 through 1.6.2Affected
  • 1.5.0 through 1.5.1Affected
  • 1.4.0 through 1.4.3Affected
  • 1.3.0 through 1.3.1Affected
  • 1.2.0Affected
  • 1.1.0 through 1.1.2Affected
  • 1.0.0 through 1.0.3Affected
FortiProxyFortinet
  • 7.6.0 through 7.6.4Affected
  • 7.4.0 through 7.4.11Affected
  • 7.2.0 through 7.2.16Affected
  • 7.0.0 through 7.0.23Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.