Description
A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiSwitchManager | 7.2.2 – ≤ 7.2.5 | — |
| Fortinet | FortiOS | 7.6.0 – ≤ 7.6.2, 7.4.0 – ≤ 7.4.7, 7.2.4 – ≤ 7.2.11 | — |
Advisories 4
- SSA-864900 SSA-864900: Multiple Vulnerabilities in Fortigate NGFW before V7.6.6 on RUGGEDCOM APE1808 Devices Siemens ProductCERT · Oct 13, 2026
- NCSC-2026-0015 Kwetsbaarheid verholpen in Fortinet FortiOS NCSC-NL (Netherlands) · Sep 10, 2026
- WID-SEC-2026-0085 Fortinet FortiOS: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Sep 9, 2026
- ICSA-25-135-01 Siemens RUGGEDCOM APE1808 Devices CISA ICS & IT advisories · Jul 9, 2026