CVE-2026-71407

EUVD-2026-57191
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.6 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 44.13%
Affected Products (NVD)
VendorProductVersion
fortinetfortios
7.6.1 ≤
𝑥
< 7.6.7
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
SiemensRUGGEDCOM APE1808
𝑥
< *
ADP
Common Weakness Enumeration
References
https://fortiguard.fortinet.com/psirt/FG-IR-26-161
https://cert-portal.siemens.com/productcert/html/ssa-127084.html