CVEFinder.io

CVE-2026-70466

🔶 medium
Summary

A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control via <insert attack vector here>

CVSS Score
5.3
Medium
EPSS Score
0.3
Exploit Probability
Published Date
2026-08-12
First Seen: 2026-08-13
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 19.0% of all 365,890 vulnerabilities in our database.

#296,520
Below average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Aug 12, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
YES
Can be exploited automatically
💥 Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2026-09-08
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CWE IDs (Weakness Types)
CWE-184

📦 Affected Products 2

Vendor Product Status Affected Versions
fortinet fortiweb Affected
> 7.0.0 < 7.6.6
fortinet fortiweb Affected
> 8.0.0 < 8.0.3

🔗 References 1

https://fortiguard.fortinet.com/psirt/FG-IR-26-157
Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-26035 ⛔ critical 9.8 0.7 An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.... 2026-08-12
CVE-2026-39811 🔶 medium 4.9 0.1 A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, F... 2026-04-14
CVE-2026-39814 🔶 medium 6.7 0.0 A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb... 2026-04-14
CVE-2026-40688 ⚠️ high 7.2 6.4 An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 th... 2026-04-14
CVE-2025-48840 🔶 medium 5.3 0.1 An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.... 2026-03-10
CVE-2025-66178 ⚠️ high 7.2 0.0 A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet F... 2026-03-10
These CVEs affect the same products