CVE-2021-26112

9.8 criticalEPSS 1.7%

Critical (9.8) in fortinet fortiwan. EPSS 1.7% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflow vulnerabilities [CWE-121] both in network daemons and in the command line interpreter of FortiWAN before 4.5.9 may allow an unauthenticated attacker to potentially corrupt control data in memory and execute arbitrary code via specifically crafted requests.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2022-04-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortiwan

References

https://fortiguard.com/psirt/FG-IR-21-065
https://fortiguard.com/psirt/FG-IR-21-065

Check your stack JSON