An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions and FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions RDP bookmark connection may allow an authenticated user to execute unauthorized code via crafted requests.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://fortiguard.fortinet.com/psirt/FG-IR-25-756 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 8.8 · fortinetNVD modified 2026-10-18 21:10
Affected (CPE criteria) 4
cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*