Stack-Based Buffer Overflow in Fortinet FortiOS Products
CVE-2026-126258

7.1HIGH

Key Information:

Vendor

Fortinet
Status
FortiOS
Vendor
CVE Published:
11 November 2026

What is CVE-2026-126258?

The vulnerability presents a stack-based buffer overflow in Fortinet's FortiOS versions 8.0.0 and 7.6.7. An unauthenticated attacker with access to the wad port has the capability to exploit this flaw by sending specially crafted HTTP or HTTPS requests, potentially leading to the crash of proxy or ZTNA sessions.

Affected Version(s)

FortiOS 8.0.0

FortiOS 7.6.7

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-272

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.