Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mj8x-m8f5-x4w8

Опубликовано: 13 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4.0 through 6.4.16, FortiSASE 25.2.b, FortiSASE 25.1.a.2, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4.0 through 6.4.16, FortiSASE 25.2.b, FortiSASE 25.1.a.2, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

EPSS

Процентиль: 7%
0.00028
Низкий

8.1 High

CVSS3

Дефекты

CWE-122
CWE-787

Связанные уязвимости

CVSS3: 8.1
nvd
24 дня назад

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4.0 through 6.4.16, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

CVSS3: 8.1
fstec
25 дней назад

Уязвимость демона cw_acd локальной платформы управления FortiSwitchManager и операционных систем FortiOS, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 7%
0.00028
Низкий

8.1 High

CVSS3

Дефекты

CWE-122
CWE-787