CVE-2026-71407: A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection…

High severity · published Aug 12, 2026

CVE-2026-71407

A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection…

8.1

CVSS

0.5%

EPSS

On KEV

Description

A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

High

Privileges

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.5% · higher than 44% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

FortiOS · Fortinet

7.6.1 through 7.6.6 · source: vendor, NVD

FortiPAM · Fortinet

1.8.0 through 1.8.4; 1.7.0 through 1.7.2; 1.6.0 through 1.6.2; 1.5.0 through 1.5.1; 1.4.0 through 1.4.3; 1.3.0 through 1.3.1; +3 more · source: vendor

FortiProxy · Fortinet

7.6.0 through 7.6.4; 7.4.0 through 7.4.11; 7.2.0 through 7.2.16; 7.0.0 through 7.0.23 · source: vendor

RUGGEDCOM APE1808 · Siemens

0 · source: CISA

Affected product

FortiOS

Fortinet

All FortiOS CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-71407

CVE.org

https://www.cve.org/CVERecord?id=CVE-2026-71407

Vendor Advisory

https://fortiguard.fortinet.com/psirt/FG-IR-26-161

cert-portal.siemens.com

https://cert-portal.siemens.com/productcert/html/ssa-127084.html