CVE-2021-41027: Fortinet FortiWeb

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an authenticated attacker to execute unauthorized code or commands via crafted certificates loaded into the device.

Affected products

• Fortinet FortiWeb: version 6.4.0 only; version 6.4.1 only

Published 2021-12-08. Last modified 2026-06-17.