Back www.fortiguard.com

CVE-2026-70465

www.fortiguard.com • August 14, 2026

A buffer copy without checking size of input vulnerability [CWE-120] in FortiClient Windows may allow an unauthenticated attacker in a position to alter or craft DNS responses to the targeted host to execute arbitrary code via malicious packets.

Disable application based filtering in FortiClient EMS VPN configuration:

FortiClient EMS > Remote Access Profile > VPN Tunnel > "Toggle" Application Based

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Fortinet Products Allow Unauthorized Access Fortinet has disclosed multiple vulnerabilities affecting its products, including FortiWeb, FortiManager, and FortiClientWindows. The most critical, CVE-2026-26035, allows remote unauthenticated access to FortiWeb instances if the wildcard option is enabled. Other vulnerabilities, CVE-2026-70468 and CVE-2026-70465, also pose significant risks, permitting unauthorized access under specific conditions. Patches have been released for affected versions, including 7.2.13, 7.4.12, 7.6.7, and 8.0.3 for FortiWeb. Administrators are advised to apply these patches promptly, as these products are often central to corporate networks. The vulnerabilities were published on August 12, 2026, and there are currently no reports of active exploitation. However, the potential for serious breaches remains high, prompting urgent action from security teams. 1 sources 72

Extracted Entities

CVE-2026-70465

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)