CyberSec.Space Logo
CVEブラウザに戻る

CVE-2026-40688

HIGH
7.2
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2026-04-14
Last Modified2026-07-24
Data SourcesNVD

Vulnerability Description

An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow a remote privileged attacker to execute arbitrary code or command via crafted HTTP requests.

Affected Platforms (CPE)

📦
Fortinet

Fortiweb

>= 7.4.0 and < 7.4.12>= 7.6.0 and < 7.6.7>= 8.0.0 and < 8.0.4

References & Advisories

🔗 https://fortiguard.fortinet.com/psirt/FG-IR-26-127

関連する脆弱性情報

CVE-2026-248589.8

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 ...

CVE-2025-644714.9

A use of password hash instead of password for authentication vulnerability [CWE-836] vulnerability in Fortinet FortiWeb 8.0.0 thr...

CVE-2025-644478.1

A reliance on cookies without validation and integrity checking vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7...

CVE-2025-597199.8

An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiW...