CVE-2024-21762

A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.13, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiOS 6.0 all versions, FortiProxy 7.4.0 through 7.4.2, FortiProxy 7.2.0 through 7.2.8, FortiProxy 7.0.0 through 7.0.14, FortiProxy 2.0.0 through 2.0.13, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via specifically crafted requests

CVSS 3.1

9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

85% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-25)

CISA KEV

listed 2024-02-09, due 2024-02-16, known ransomware use

CWE

CWE-787

Published

2024-02-09

Modified

2026-10-22

Record from

the NVD, synced 2026-10-23

Affected

• fortinet:fortios
• fortinet:fortiproxy

References

• https://fortiguard.com/psirt/FG-IR-24-015
• https://fortiguard.com/psirt/FG-IR-24-015
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21762

Check your stackJSON