imPC@ndo IT

Tracker / CVE-2026-40688

CVE-2026-40688

High 7.2

An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow a remote privileged attacker to execute arbitrary code or command via crafted HTTP requests.

Affected products and versions

fortinet fortiweb · 7.4.0 → 7.4.12
fortinet fortiweb · 7.6.0 → 7.6.7
fortinet fortiweb · 8.0.0 → 8.0.4

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References