CVE-2026-70465

HIGH8.1Published on August 12, 2026

A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter or craft DNS responses to the targeted host to execute arbitrary code via malicious packets.

CVSS score8.1 / 10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-120

Fortinet corregge falle critiche in FortiWeb e FortiManager

Vulnerabilities

Fortinet Fixes Critical Vulnerabilities in FortiWeb and FortiManager

Fortinet patches critical vulnerabilities in FortiWeb and FortiManager, including a CVSS 9.8 flaw allowing unauthorized admin access. Details and fixes.

Aug 17, 20265 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Fortinet Fixes Critical Vulnerabilities in FortiWeb and FortiManager