CVE-2026-40688 — Fortinet / FortiWeb

CVE-2026-40688

Fortinet / FortiWeb PUBLISHED

Description (CNA)

An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow a remote privileged attacker to execute arbitrary code or command via crafted HTTP requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiWeb	affected 8.0.0 through 8.0.3; affected 7.6.0 through 7.6.6; affected 7.4.0 through 7.4.11

CWE

CWE-787

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-127

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.