CVE-2026-126258

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-126258", "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "state": "PUBLISHED", "assignerShortName": "fortinet", "dateReserved": "2026-11-10T20:10:09.146Z", "datePublished": "2026-11-11T21:31:50.602Z", "dateUpdated": "2026-11-12T15:27:53.484Z"}, "containers": {"cna": {"affected": [{"vendor": "Fortinet", "product": "FortiOS", "cpes": ["cpe:2.3:o:fortinet:fortios:8.0.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.6.7:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "8.0.0", "status": "affected"}, {"version": "7.6.7", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "A stack-based buffer overflow vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.7 may allow an unauthenticated attacker with wad port access to crash proxy or ZTNA sessions via crafted HTTP or HTTPS requests."}], "providerMetadata": {"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "shortName": "fortinet", "dateUpdated": "2026-11-11T21:31:50.602Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-121", "description": "Execute unauthorized code or commands", "type": "CWE"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"}}], "solutions": [{"lang": "en", "value": "Upgrade to FortiOS version 8.0.1 or above\nUpgrade to FortiOS version 7.6.8 or above"}], "references": [{"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-272", "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-272"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-12T14:10:05.875958Z", "id": "CVE-2026-126258", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-12T15:27:53.484Z"}}]}}

{}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:o:fortinet:fortios:8.0.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.6.7:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "FortiOS", "vendor": "Fortinet", "versions": [{"status": "affected", "version": "8.0.0"}, {"status": "affected", "version": "7.6.7"}]}], "source": "psirt@fortinet.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A stack-based buffer overflow vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.7 may allow an unauthenticated attacker with wad port access to crash proxy or ZTNA sessions via crafted HTTP or HTTPS requests."}], "id": "CVE-2026-126258", "lastModified": "2026-11-12T19:14:29.340", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "psirt@fortinet.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-126258", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-12T14:10:05.875958Z", "version": "2.0.3"}}]}, "published": "2026-11-11T22:17:26.073", "references": [{"source": "psirt@fortinet.com", "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-272"}], "sourceIdentifier": "psirt@fortinet.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-121"}], "source": "psirt@fortinet.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "8.0.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.6.7"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "FortiOS", "source": "cna", "vendor": "Fortinet"}, "product": "fortios", "vendor": "fortinet"}], "created": "2026-11-12T17:00:06.123366+00:00", "title": "Unauthenticated Stack-based Buffer Overflow in FortiOS Proxy and ZTNA Sessions", "updated": "2026-11-13T01:30:09.230032+00:00", "vendors": ["fortinet", "fortinet$PRODUCT$fortios"]}