An out-of-bounds write vulnerability exists in Fortinet FortiWeb versions 8.0.0 to 8.0.3, 7.6.0 to 7.6.6, and 7.4.0 to 7.4.11. This vulnerability allows an attacker with high privileges to execute unauthorized code or commands. The CVSS v3.1 base score is 6.7, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The vulnerability has been officially fixed by Fortinet, and patches are available. No public exploit code or active exploitation has been reported.

Successful exploitation could lead to unauthorized code or command execution on affected FortiWeb devices, potentially compromising confidentiality, integrity, and availability of the system. The attacker requires high privileges to exploit this vulnerability. There are no reports of active exploitation in the wild.

An official fix is available from Fortinet for this vulnerability. Users should apply the provided patches to affected FortiWeb versions 8.0.0 through 8.0.3, 7.6.0 through 7.6.6, and 7.4.0 through 7.4.11 as soon as possible to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.