Out-of-Bounds Read Vulnerability in Fortinet FortiOS Products
CVE-2026-126256

7.4HIGH

Key Information:

Vendor

Fortinet
Status
FortiOS
Vendor
CVE Published:
11 November 2026

What is CVE-2026-126256?

An out-of-bounds read vulnerability exists in Fortinet's FortiOS products versions 8.0.0 through 8.0.1 and several earlier versions. This flaw may be exploited by remote privileged attackers, potentially allowing them to execute arbitrary code or commands by sending specially crafted packets to vulnerable systems. Organizations using affected FortiOS versions should promptly review and implement available security updates to mitigate risks associated with this vulnerability.

Affected Version(s)

FortiOS 8.0.0 <= 8.0.1

FortiOS 7.6.0 <= 7.6.7

FortiOS 7.4.0 <= 7.4.13

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-270

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.