UpHeron
All vulnerabilities

Servers and applications

CVE-2026-126258

A stack-based buffer overflow vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.7 may allow an unauthenticated attacker with wad port access to crash proxy or ZTNA sessions via crafted HTTP or HTTPS requests.

Severity
High 7.1
Published
11 Nov 2026
Last changed
11 Nov 2026
Added to UpHeron
11 Nov 2026
Weakness
Stack-based buffer overflow (CWE-121)
Attack
Over the network · No login needed · No user action needed
Attacker can
Take it down
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
Sources
CVE Program

Affected software

SoftwareAffected versions
Fortinet FortiOSServers and applications · cna:fortinet|fortios
  • Version 7.6.7
  • Version 8.0.0
Fortinet FortiOSServers and applications · cpe:o:fortinet:fortios
  • Version 7.6.7
  • Version 8.0.0

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-126258