CVE-2026-71407
MediumCVSS 5.6Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
Fortinet FortiOS versions 7.6.1-7.6.6 have a stack-based buffer overflow vulnerability (CWE-121) that may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon, but only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled.
Risk Assessment
An attacker could achieve remote code execution on the device, potentially leading to full system compromise.
Recommendation
Upgrade FortiOS to a patched version or apply mitigations such as disabling SOCKS or Kerberos if possible.
Original NVD description (English source)
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled.