CVE-2026-70466CWE-184

CVE-2026-70466

Medium · published August 12, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
22.6
In the wild
Unconfirmed
What it is

A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control via <insert attack vector here>

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00310 · 22.6th percentile
Weakness
CWE-184 · Incomplete List of Disallowed Inputs
Published
2026-08-12T17:17Z
Affected products (2)
ProductVersionsFixed in
fortinet/fortiweb≥ 7.0.0, < 7.6.67.6.6
fortinet/fortiweb≥ 8.0.0, < 8.0.38.0.3
References (1)
https://fortiguard.fortinet.com/psirt/FG-IR-26-157 · [email protected]
EPSS history
Timeline
  • 12 AUG 12:19Z
    A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions…
    cvelistv5