Description
A incomplete list of disallowed inputs vulnerability [CWE-184] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control via specifically crafted requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiWeb | 8.0.0 – ≤ 8.0.2, 7.6.0 – ≤ 7.6.5, 7.4.0 – ≤ 7.4.13, 7.2.0 – ≤ 7.2.13, 7.0.0 – ≤ 7.0.12 | — |
Advisories 2
- NCSC-2026-0300 Kwetsbaarheden verholpen in Fortinet FortiWeb NCSC-NL (Netherlands) · Aug 13, 2026
- WID-SEC-2026-2810 Fortinet FortiWeb: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Aug 12, 2026