FORTIOS · CVE-2026-126258 · Infrastructure
FIX → 8.0.1 · 7.6.8
A stack-based buffer overflow in FortiOS 8.0.0 and 7.6.7 can be triggered by crafted HTTP or HTTPS requests sent to the wad proxy service. The sources say it lets an unauthenticated attacker crash proxy or ZTNA sessions.
first public Nov 11, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
FortiGate/FortiOS devices running 8.0.0 or 7.6.7 where the wad proxy service (web proxy, ZTNA) is reachable by an attacker, with no login needed. Fortinet says crafted HTTP/HTTPS requests can crash proxy or ZTNA sessions; its Impact field also says 'execute unauthorized code or commands'. FortiOS 7.4 and 7.2 are not affected. Devices not exposing wad ports to untrusted networks have less exposure.
Not affected if fortios-7.2, fortios-7.4, no-wad-port-access, no-ztna-or-proxy
Who cares firewall, fortios, self-hosted, wad, ztna
Upgrade to 8.0.1 · 7.6.8
A stack-based buffer overflow vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.7 may allow an unauthenticated attacker with wad port access to crash proxy or ZTNA sessions via crafted HTTP or HTTPS requests.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
8.0.0: upgrade to 8.0.1 or above7.6.7: upgrade to 7.6.8 or above (Rescana reports Fortinets CSAF file calls 7.6.8 upcoming', so confirm it is released before planning)