{"id":"CVE-2026-39814","title":"Multiple Relative Path Traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.1 through 7.4.13, FortiWeb 7.2.7 through 7.2.13, FortiWeb 7.0.10 through 7.0.12 …","summary":"Multiple Relative Path Traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.1 through 7.4.13, FortiWeb 7.2.7 through 7.2.13, FortiWeb 7.0.10 through 7.0.12 …","severity":"medium","cvss":6.2,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C","cvssSource":"cna","cwe":["CWE-23"],"vendor":"Fortinet","product":"FortiWeb","affected":["FortiWeb >= 8.0.0 <= 8.0.2","FortiWeb >= 7.6.0 <= 7.6.6","FortiWeb >= 7.4.1 <= 7.4.13","FortiWeb >= 7.2.7 <= 7.2.13","FortiWeb >= 7.0.10 <= 7.0.12"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-04-14T00:00:00+00:00"},"published":"2026-04-14","updated":"2026-10-29","sourceUpdated":"2026-10-29T16:16:48.351Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-39814","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-114","label":"https://fortiguard.fortinet.com/psirt/FG-IR-26-114"}],"tags":["cve.org"],"epss":0.00132,"epssPercentile":0.02776,"ingestedAt":"2026-11-01T21:01:32.731Z","slug":"CVE-2026-39814","body":"## Overview\n\nMultiple Relative Path Traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.1 through 7.4.13, FortiWeb 7.2.7 through 7.2.13, FortiWeb 7.0.10 through 7.0.12 may allow a local privileged attacker to execute unauthorized code on the underlying system via crafted CLI commands.\n\n## Affected\n\n- `FortiWeb >= 8.0.0 <= 8.0.2`\n- `FortiWeb >= 7.6.0 <= 7.6.6`\n- `FortiWeb >= 7.4.1 <= 7.4.13`\n- `FortiWeb >= 7.2.7 <= 7.2.13`\n- `FortiWeb >= 7.0.10 <= 7.0.12`\n\n## Remediation\n\nUpgrade to FortiWeb version 8.0.3 or above\nUpgrade to FortiWeb version 7.6.7 or above","depth":"sunlit","depthScore":34,"depthScoreParts":{"impact":34.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}