Recently modified vulnerabilities for "fortinet fortiproxy" 7.6.6

Where

AND

Sort:

Fortinet FortiOSDouble free in signal handler

Risk 13

Severity

2.3

Double Free

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

A Double Free vulnerability [CWE-415] in FortiOS, FortiProxy and FortiSwitch may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.

1 / 2

Source: FortiGuard

First published (updated )

CVE-2026-106175

Fortinet FortiOSZTNA Portal Improper Certificate Validation

Risk 75

Severity

8.1

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure via <insert attack vector here>

1 / 2

Source: NVD

First published (updated )

CVE-2026-84393

Microsoft azl3 nginx 1.28.3-4HTTP/2 Bomb CVE-2026-49975

Risk 50

Severity

7.5

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Apache HTTP Server: modhttp2 denial of service

1 / 7

Source: Microsoft

First published (updated )

CVE-2026-49975

Fortinet FortiOSNull Pointer Dereference in Log Report

Risk 16

Severity

2.7

Null Pointer Dereference

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

A NULL Pointer Dereference vulnerability [CWE-476] in FortiOS, FortiProxy and FortiPAM may allow an authenticated attacker to crash the httpsd daemon via crafted HTTP requests.

1 / 2

Source: FortiGuard

First published (updated )

CVE-2026-84392

Fortinet FortiOSDouble free in signal handler

Risk 13

Severity

2.1

Double Free

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

A Double Free vulnerability [CWE-415] in FortiOS, FortiProxy and FortiSwitch may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.

First published (updated )

Advisory

FG-IR-26-182

Fortinet FortiOSNull Pointer Dereference in Log Report

Risk 15

Severity

2.5

Null Pointer Dereference

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

A NULL Pointer Dereference vulnerability [CWE-476] in FortiOS, FortiProxy and FortiPAM may allow an authenticated attacker to crash the httpsd daemon via crafted HTTP requests.

First published (updated )

Advisory

FG-IR-26-173

Fortinet FortiOSZTNA Portal Improper Certificate Validation

Risk 75

Severity

8.1

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

An improper certificate validation vulnerability [CWE-295] in FortiOS and FortiProxy Agentless ZTNA portal may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the ZTNA portal and the backend destination website.

First published (updated )

Advisory

FG-IR-26-174

Fortinet FortiManagerHTTP/2 Bomb CVE-2026-49975

Risk 30

Severity

5.8

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L/E:F/RL:O/RC:C

CVE-2026-49975Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's modhttp leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

First published (updated )

Advisory

FG-IR-26-163

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Trending

Company

Resources

Contact