CVE-2021-36179: Fortinet FortiWeb

High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days.

A stack-based buffer overflow in Fortinet FortiWeb version 6.3.14 and below, 6.2.4 and below allows attacker to execute unauthorized code or commands via crafted parameters in CLI command execution

Affected products

• Fortinet FortiWeb: up to and including 6.2.4; from 6.3.0, up to and including 6.3.14

Published 2021-09-08. Last modified 2026-06-17.