Fortinet FortiWeb 7.6.6
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortiweb:7.6.6:*:*:*:*:*:*:*
part: a version: 7.6.6 update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortiweb (9f9ba09f-3c25-5875-8124-5309d16a8616) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-40688 |
vulnerable | 2026-06-08 08:01:20.914302 |
Details available
MEDIUM (6.7)
An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow a remote privileged attacker to execute arbitrary code or command via crafted HTTP requests.
Published: 2026-04-14T22:35:15.438Z
Updated: 2026-04-16T03:55:18.342Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-39814 |
vulnerable | 2026-06-08 08:01:17.035319 |
Details available
MEDIUM (6.2)
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.1 through 7.4.12, FortiWeb 7.2.7 through 7.2.12, FortiWeb 7.0.10 through 7.0.12 may allow attacker to execute unauthorized code or commands via <insert attack vector here>
Published: 2026-04-14T15:38:16.660Z
Updated: 2026-04-15T03:58:21.366Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-39811 |
vulnerable | 2026-06-08 08:01:16.914001 |
Details available
MEDIUM (4.4)
A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to denial of service via <insert attack vector here>
Published: 2026-04-14T15:38:20.186Z
Updated: 2026-04-14T16:46:15.353Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-30897 |
vulnerable | 2026-06-08 07:57:14.457597 |
Details available
MEDIUM (5.9)
A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote authenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands via crafted HTTP requests.
Published: 2026-03-10T16:44:04.857Z
Updated: 2026-03-11T03:56:47.990Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24858 |
vulnerable | 2026-06-08 07:53:18.576104 |
Details available
CRITICAL (9.4)
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager 7.4.0 through 7.4.9, FortiManager 7.2.0 through 7.2.11, FortiManager 7.0.0 through 7.0.15, FortiNAC-F 7.6.3 through 7.6.5, FortiOS 7.6.0 through 7.6.5, FortiOS 7.4.0 through 7.4.10, FortiOS 7.2.0 through 7.2.12, FortiOS 7.0.0 through 7.0.18, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.12, FortiProxy 7.2.0 through 7.2.15, FortiProxy 7.0.0 through 7.0.22, FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.
Published: 2026-01-27T19:18:23.591Z
Updated: 2026-06-09T14:27:53.379Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24641 |
vulnerable | 2026-06-08 07:51:17.947235 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24640 |
vulnerable | 2026-06-08 07:51:17.936340 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.