Research · Jan 13, 2026 · ZeroDay Catalog
Heap-based Buffer Overflow Vulnerability in Fortinet Products
A critical heap-based buffer overflow vulnerability has been identified in multiple Fortinet products, allowing potential unauthorized code execution.
What changed
A heap-based buffer overflow vulnerability has been discovered in various versions of Fortinet's FortiOS and FortiSwitchManager. This flaw could allow an attacker to execute unauthorized code or commands by sending specially crafted packets to the affected systems.
The vulnerability affects multiple versions of FortiOS ranging from 6.4 to 7.6.3 and specific versions of FortiSwitchManager.
Who is affected
Organizations utilizing Fortinet products, particularly those running the affected versions of FortiOS and FortiSwitchManager, are at risk. This includes enterprises relying on Fortinet for network security and management.
Additionally, any users of FortiOS versions 6.4 through 7.6.3 and FortiSwitchManager versions 7.0.0 through 7.2.6 should be aware of this vulnerability.
- Fortinet FortiOS versions 6.4, 7.0.0 through 7.6.3
- Fortinet FortiSwitchManager versions 7.0.0 through 7.2.6
- Organizations with network infrastructure relying on Fortinet products
What to do
It is essential for affected organizations to assess their current Fortinet deployments and apply necessary updates or patches as soon as they are available. Monitoring network traffic for unusual activity may also help mitigate potential exploitation.
Stay informed through Fortinet's official channels for any security advisories and updates regarding this vulnerability.
- Review and update FortiOS and FortiSwitchManager to the latest secure versions.
- Implement network monitoring to detect potential exploitation attempts.
- Consult Fortinet's security advisories for further guidance.