CVE-2026-24641

CVE-2026-24641CVE-2026-24641

fortinet / fortiweb

Description

A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow an authenticated attacker to crash the HTTP daemon via crafted HTTP requests.

Scoring

CVSS 2.7 ()
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Last modified2026-11-06
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.