CVE-2026-71407

A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled.

CVSS 3.1

8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-25)

CWE

CWE-121

Published

2026-08-12

Modified

2026-10-24

Record from

the NVD, synced 2026-10-24

Affected

• fortinet:fortios

References

• https://fortiguard.fortinet.com/psirt/FG-IR-26-161
• https://cert-portal.siemens.com/productcert/html/ssa-127084.html

Check your stackJSON