CVE-2026-39814: A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.1 through 7.4.12, FortiWeb 7.2.7 through 7.2.12, FortiWeb 7.0.10 through 7.0.12 may allow attacker to execute unaut…

A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.1 through 7.4.12, FortiWeb 7.2.7 through 7.2.12, FortiWeb 7.0.10 through 7.0.12 may allow attacker to execute unaut…

Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.

FortiWeb

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Fortinet",
                    "product": "FortiWeb",
                    "cpes": [
                        "cpe:2.3:a:fortinet:fortiweb:8.0.2:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiweb:8.0.1:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiweb:8.0.0:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiweb:7.6.6:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiweb:7.6.5:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiweb:7.6.4:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiweb:7.4.12:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiweb:7.4.11:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiweb:7.4.10:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiweb:7.4.9:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*",
                        "cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*"
                    ],
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "versionType": "semver",
                            "version": "8.0.0",
                            "lessThanOrEqual": "8.0.2",
                            "status": "affected"
                        },
                        {
                            "versionType": "semver",
                            "version": "7.6.0",
                            "lessThanOrEqual": "7.6.6",
                            "status": "affected"
                        },
                        {
                            "versionType": "semver",
                            "version": "7.4.1",
                            "lessThanOrEqual": "7.4.12",
                            "status": "affected"
                        }
                    ]
                }

cve-program · CVE-2026-39814

FortiWeb