Back www.fortiguard.com

oftpd daemon of FortiAnalyzer Cloud and FortiManager Cloud 7.6

www.fortiguard.com • April 15, 2026

A heap-based buffer overflow vulnerability [CWE-122] in FortiAnalyzer Cloud oftpd daemon may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests. Successful exploitation would require a large amount of effort in preparation because of ASLR and network segmentation

Thanks to network segmentation, this vulnerability could only be exploited if the attacker has already access to another cloud component belonging to the same entity.

2026-04-14: Initial publication

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fortinet Issues Security Advisory for Critical Vulnerabilities On March 10, 2026, Fortinet released a security advisory addressing eleven vulnerabilities in its core products, including a high-severity stack-based buffer overflow in FortiManager (CVE-2025-54820) that allows remote unauthenticated attackers to execute unauthorized commands. The vulnerabilities affect enterprise network management environments, posing significant risks to users of the affected Fortinet products. 71 sources 72

Extracted Entities

oftpd daemon of FortiAnalyzer Cloud and FortiManager Cloud 7.6

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (2)