Second FortiManager heap overflow allows admin code execution
Original title: Heap-based buffer overflow
FG-IR-26-223, scored CVSS 7.2, lets an authenticated admin run code through a crafted request.
Fortinet PSIRT revised FG-IR-26-223 on November 10 for a separate heap-based buffer overflow in FortiManager, FortiAnalyzer, FortiManager Cloud and FortiAnalyzer Cloud. An authenticated attacker with admin privileges may execute unauthorized code or commands via a crafted request. No versions, patch, or exploitation details appear in the snippet.
Unconfirmed: The snippet does not state versions, a fix, or known exploitation.
- The advisory identifier is FG-IR-26-223, distinct from FG-IR-26-232.
- CVSSv3 score is 7.2 and the weakness is CWE-122.
- Admin privileges are required; the request type is not specified.
Impact: Authenticated admin can execute unauthorized code or commands
| Product | Affected |
|---|---|
| Fortinet FortiManager | — |
| Fortinet FortiAnalyzer | — |
| Fortinet FortiManager Cloud | — |
| Fortinet FortiAnalyzer Cloud | — |
- Vendors
- Fortinet
From the original article
CVSSv3 Score: 7. 2 A Heap-based Buffer Overflow vulnerability [CWE-122] in FortiManager, FortiAnalyzer, FortiManager Cloud and FortiAnalyzer Cloud may allow an authenticated attacker with admin privileges to execute unauthorized code or commands via a crafted request. Revised on 2026-11-10 00:00:00
fortiguard.fortinet.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.