CVE-2021-36193: Fortinet FortiWeb

High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted commands.

Affected products

• Fortinet FortiWeb: from 5.0.0, before 6.2.6 (fixed in 6.2.6); from 6.3.0, before 6.3.16 (fixed in 6.3.16); from 6.4.0, before 6.4.2 (fixed in 6.4.2)

Published 2022-02-02. Last modified 2026-06-17.