Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-08-12 | 1 | Disclosure1 |
| 2026-08-13 | 2 | Active Exploitation1Patch1 |
Some increased actor activities are shown targeting Fortinet FortiPAM and other products (CVE-2026-71407) https://vuldb.com/vuln/388989/cti
Post summary
This post notes increased threat actor activity targeting Fortinet FortiPAM tied to CVE‑2026‑71407, implying active exploitation but offering no PoC, patch, or detailed vulnerability data.
FortiOS explicit proxy users face RCE risk (CVE-2026-71407) if Kerberos and SOCKS are enabled. Patch immediately to prevent network compromise. #fortios #vulnerability #networksecurity #bufferoverflow https://merge.news/post/FevCTFfHAdPowU0GFQAL
Post summary
The advisory warns FortiOS users of a remote code execution vulnerability (CVE‑2026‑71407) when Kerberos and SOCKS are enabled and urges an immediate patch to protect the network.
CVE-2026-71407 FortiOS 7.6.1-7.6.6 Stack Buffer Overflow Allows Arbitrary Code E... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-71407 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The text announces a stack buffer overflow vulnerability (CVE‑2026‑71407) in FortiOS 7.6.1‑7.6.6, referencing potential arbitrary code execution and linking to more details, but does not provide any PoC, exploit, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | fortinet | fortios | - | - | - |