4.8
Medium
CVE-2026-70466 A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through…
Description
A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control via <insert attack vector here>
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiWeb 8.0 | 8.0.0 → 8.0.2 | No fix stated |
| FortiWeb 7.6 | 7.6.0 → 7.6.5 | No fix stated |
| FortiWeb 7.4 | 7.4.0 → 7.4.13 | No fix stated |
| FortiWeb 7.2 | 7.2.0 → 7.2.13 | No fix stated |
| FortiWeb 7.0 | 7.0.0 → 7.0.12 | No fix stated |
| FortiOS 7.6 | 7.6.0 → 7.6.7 | No fix stated |
| FortiOS 7.4 | 7.4.0 → 7.4.11 | No fix stated |
| FortiOS 7.2 | 7.2.0 → 7.2.13 | No fix stated |
| FortiOS 7.0 | 7.0.0 → 7.0.19 | No fix stated |
Show the other branch Hide the other branch
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiOS 6.4 | 6.4.0 → 6.4.16 | No fix stated |
References
- fortiguard.fortinet.com fortiguard.fortinet.com
Timeline
- Published
- Last modified
Other CVEs of FortiWeb
The 74 CVEs of FortiWeb →
CVE-2026-26035
An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb…
8.8
High
CVE-2026-40688
An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0…
6.7
Medium
CVE-2026-39811
A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6,…
4.4
Medium
CVE-2026-39814
Multiple Relative Path Traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2,…
6.2
Medium