NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#cwe-134

1 stories this week · 1 this month · 2 in 6 months · mostly security

Stories per day · 30 days

Relatedformat-string1 fortianalyzer1 fortimanager1 fortinet1

2 stories, newest first · one card per story

Fortinet PSIRT1d ago

FortiManager and FortiAnalyzer API format-string flaw scores CVSS 7.2

An authenticated attacker can run unauthorized commands through a crafted HTTP request to the named cloud and on-prem APIs.

20 sources fortinet fortimanager

Full DisclosureSep 27, 2026

[SYSS-2026-071]: GDCM (Grassroots DICOM) - Format String (CWE-134)

SySS disclosed an unpatched medium-risk format-string flaw in GDCM 3.3.0, with no CVE assigned.

5 sources gdcm dicom

1