GUI Denial of Service
FG-IR-26-181
Summary
CVSSv3 Score:
5.6
A Stack-based Buffer Overflow vulnerability [CWE-121] in FortiOS explicit proxy may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled.
Revised on 2026-08-12 00:00:00
Products covered
FortiOS
Remediation
Separate remediation guidance was not included in the collected bulletin.
CVEs in this advisory 1
Update history
What changed in later vendor updates
SecurityAlert records field-level changes from the point we begin following a bulletin. Earlier vendor changes may not have a field-by-field record.
- The vendor changed the advisory summary.
- CVSS changed from 5.1 to 5.6.
- Added CVEs: CVE-2026-71407.
Updates
- Published by Fortinet
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.