Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mj8x-m8f5-x4w8

Опубликовано: 13 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4.0 through 6.4.16, FortiSASE 25.2.b, FortiSASE 25.1.a.2, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4.0 through 6.4.16, FortiSASE 25.2.b, FortiSASE 25.1.a.2, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

EPSS

Процентиль: 52%
0.00759
Низкий

8.1 High

CVSS3

Дефекты

CWE-122
CWE-787

Связанные уязвимости

CVSS3: 8.1
nvd
7 месяцев назад

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

CVSS3: 8.1
fstec
7 месяцев назад

Уязвимость демона cw_acd локальной платформы управления FortiSwitchManager и операционных систем FortiOS, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 52%
0.00759
Низкий

8.1 High

CVSS3

Дефекты

CWE-122
CWE-787