Description
A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow an authenticated attacker to crash the HTTP daemon via crafted HTTP requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiWeb | 8.0.0 – ≤ 8.0.2, 7.6.0 – ≤ 7.6.6, 7.4.0 – ≤ 7.4.13, 7.2.0 – ≤ 7.2.13, 7.0.0 – ≤ 7.0.12 | — |
Advisories 2
- NCSC-2026-0092 Kwetsbaarheden verholpen in Fortinet FortiWeb NCSC-NL (Netherlands) · Mar 12, 2026
- WID-SEC-2026-0662 Fortinet FortiWeb: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 10, 2026