{"id":"CVE-2026-24640","title":"A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0.2 through 7.0.12 may allow a r…","summary":"A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0.2 through 7.0.12 may allow a r…","severity":"medium","cvss":5.9,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","cvssSource":"cna","cwe":["CWE-121"],"vendor":"Fortinet","product":"FortiWeb","affected":["FortiWeb >= 8.0.0 <= 8.0.2","FortiWeb >= 7.6.0 <= 7.6.6","FortiWeb >= 7.4.0 <= 7.4.13","FortiWeb >= 7.2.0 <= 7.2.13","FortiWeb >= 7.0.2 <= 7.0.12"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-03-10T00:00:00+00:00"},"published":"2026-03-10","updated":"2026-11-06","sourceUpdated":"2026-11-06T15:42:11.216Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-24640","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-087","label":"https://fortiguard.fortinet.com/psirt/FG-IR-26-087"}],"tags":["cve.org"],"epss":0.0074,"epssPercentile":0.5477,"ingestedAt":"2026-11-06T15:54:03.983Z","slug":"CVE-2026-24640","body":"## Overview\n\nA Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0.2 through 7.0.12 may allow a remote authenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands via crafted HTTP requests.\n\n## Affected\n\n- `FortiWeb >= 8.0.0 <= 8.0.2`\n- `FortiWeb >= 7.6.0 <= 7.6.6`\n- `FortiWeb >= 7.4.0 <= 7.4.13`\n- `FortiWeb >= 7.2.0 <= 7.2.13`\n- `FortiWeb >= 7.0.2 <= 7.0.12`\n\n## Remediation\n\nUpgrade to FortiWeb version 8.0.3 or above\nUpgrade to FortiWeb version 7.6.7 or above","depth":"sunlit","depthScore":33,"depthScoreParts":{"impact":32.5,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}