CVE-2026-40688
EUVD-2026-2280814.04.2026, 23:16
An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow a remote privileged attacker to execute arbitrary code or command via crafted HTTP requests.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortiweb | 7.4.0 ≤ 𝑥 < 7.4.12 |
| fortinet | fortiweb | 7.6.0 ≤ 𝑥 < 7.6.7 |
| fortinet | fortiweb | 8.0.0 ≤ 𝑥 < 8.0.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration