CVE-2026-71407

Name of the Vulnerable Software and Affected Versions Fortinet FortiOS versions 7.6.1 through 7.6.6

Description A stack-based buffer overflow occurs in the WAD daemon when the explicit proxy is configured with Kerberos authentication and SOCKS enabled. An unauthenticated attacker can exploit this by sending crafted sockets to execute arbitrary code or commands, provided they can bypass Address Space Layout Randomization (ASLR), a security technique that randomizes memory addresses to make exploitation harder, and stack protection.

Recommendations Update Fortinet FortiOS versions 7.6.1 through 7.6.6 to a fixed version. As a temporary mitigation, disable SOCKS or Kerberos authentication in the explicit proxy configuration.