CVE-2026-71407
published 2026-08-12CVE-2026-71407: A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can…
PriorityP346medium5.6CVSS 3.1
AVNACHPRNUINSUCLILAL
EPSS
0.49%
40.5th percentile
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fortinet | fortinet | — | — |
| fortinet | fortios | — | — |
| fortinet | fortios | 7.6.1 – 7.6.6 | — |
| fortinet | fortipam | — | — |
| fortinet | fortipam | 1.0.0 – 1.0.3 | — |
| fortinet | fortipam | 1.1.0 – 1.1.2 | — |
| fortinet | fortipam | 1.3.0 – 1.3.1 | — |
| fortinet | fortipam | 1.4.0 – 1.4.3 | — |
| fortinet | fortipam | 1.5.0 – 1.5.1 | — |
| fortinet | fortipam | 1.6.0 – 1.6.2 | — |
| fortinet | fortipam | 1.7.0 – 1.7.2 | — |
| fortinet | fortipam | 1.8.0 – 1.8.4 | — |
| fortinet | fortiproxy | 7.0.0 – 7.0.23 | — |
| fortinet | fortiproxy | 7.2.0 – 7.2.16 | — |
| fortinet | fortiproxy | 7.4.0 – 7.4.11 | — |
| fortinet | fortiproxy | 7.6.0 – 7.6.4 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute ar
ghsa_unreviewed·2026-08-12
CVE-2026-71407 [MEDIUM] CWE-121 A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute ar
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled.
Fortinet
Stack buffer overflow in WAD
vendor_fortinet·2026-08-12·CVSS 5.6
CVE-2026-71407 [MEDIUM] CWE-121 Stack buffer overflow in WAD
FG-IR-26-161: Stack buffer overflow in WAD
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled.
CVEs: CVE-2026-71407
CWEs: CWE-121
CVSS: 5.6 (medium)
Affected products: FortiOS, Fortinet
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-12
Published