CVE-2026-30987 is a high-severity stack-based buffer overflow vulnerability in the InternationalColorConsortium's iccDEV library versions prior to 2.3.1.5. The flaw exists in the CIccTagNum<>::GetValues() function, where input size is not properly checked before copying data to a stack buffer, leading to potential stack memory corruption or application crashes. Exploitation requires local access and user interaction, but no privileges are needed. Successful exploitation could allow attackers to execute arbitrary code, compromise confidentiality, integrity, and availability of affected systems. No known exploits are currently reported in the wild. The vulnerability affects software that processes ICC color profiles, which are widely used in imaging, printing, and color management applications. Organizations relying on iccDEV for color profile handling should upgrade to version 2.
CVE-2026-30986 is a medium severity vulnerability in the InternationalColorConsortium's iccDEV library prior to version 2.3.1.5. It involves a heap-based buffer overflow write in the CIccMatrixMath::SetRange() function, which can cause memory corruption or application crashes. The vulnerability requires local access and user interaction to exploit, with no impact on confidentiality or integrity but can affect availability. No known exploits are currently in the wild. The issue is fixed in version 2.3.1.
CVE-2026-30985 is a high-severity heap-based buffer overflow vulnerability in the iccDEV library, specifically in the CIccMatrixMath::SetRange() function prior to version 2.3.1.5. This vulnerability arises from improper bounds checking during buffer copy operations, leading to potential memory corruption, application crashes, or exploitation. The flaw requires local access and user interaction but no privileges, making exploitation moderately challenging. Successful exploitation could allow attackers to execute arbitrary code, compromise confidentiality, integrity, and availability of affected systems. No known exploits are currently reported in the wild. Organizations using iccDEV versions before 2.3.
CVE-2026-30984 is a medium severity vulnerability in the iccDEV library used for ICC color profile management. It involves a heap out-of-bounds read in the CIccCalculatorFunc::ApplySequence() function, which can cause application crashes. The flaw affects versions prior to 2.3.1.5 and requires user interaction but no privileges. Exploitation is local and can lead to denial of service but not data integrity or confidentiality loss. No known exploits are currently in the wild. The issue is fixed in version 2.3.
CVE-2026-30983 is a high-severity stack-based buffer overflow vulnerability in the InternationalColorConsortium's iccDEV library versions prior to 2.3.1.5. The flaw exists in the icFixXml() function, which uses an unsafe strcpy call without verifying input size, leading to potential stack memory corruption or crashes. Exploitation requires local access and user interaction, but no privileges are needed. Successful exploitation could result in full confidentiality, integrity, and availability compromise of affected systems. Although no known exploits are currently in the wild, the vulnerability poses a significant risk to applications relying on iccDEV for ICC color profile management. The vulnerability is fixed in version 2.3.
CVE-2026-30982 is a heap-based buffer overflow vulnerability in the InternationalColorConsortium's iccDEV library versions prior to 2.3.1.5. The flaw exists in the function CIccPcsXform::pushXYZConvert(), where a heap out-of-bounds read can cause application crashes and potentially leak memory contents. Exploitation requires local access and user interaction, with no privileges needed. The vulnerability impacts confidentiality and availability but not integrity, and no known exploits are currently reported in the wild. The issue is fixed in version 2.3.1.
CVE-2026-30981 is a medium severity heap-buffer-overflow vulnerability in the InternationalColorConsortium's iccDEV library versions prior to 2.3.1.5. The flaw exists in the CIccXmlArrayType<>::DumpArray() function, which performs a buffer copy without proper bounds checking, leading to out-of-bounds reads and potential application crashes. Exploitation requires local access and user interaction, as indicated by the CVSS vector, and does not require privileges. While no known exploits are currently in the wild, successful exploitation could cause denial of service due to crashes. The vulnerability impacts confidentiality minimally but has a high impact on availability. Organizations using iccDEV for ICC color profile management should upgrade to version 2.3.
CVE-2026-30979 is a high-severity heap-based buffer overflow vulnerability in the InternationalColorConsortium's iccDEV library versions prior to 2.3.1.5. The flaw exists in the CIccCalculatorFunc::InitSelectOp() function and can be triggered by local user interaction, leading to memory corruption, crashes, and potentially arbitrary code execution. Exploitation requires local access and user interaction but does not require prior privileges. The vulnerability impacts confidentiality, integrity, and availability due to the possibility of executing malicious code or causing denial of service. No known exploits are currently reported in the wild. The issue is fixed in version 2.3.
CVE-2026-30978 is a high-severity use-after-free vulnerability in the InternationalColorConsortium's iccDEV library versions prior to 2.3.1.5. The flaw exists in the CIccCmm::AddXform() function, where a heap-use-after-free leads to invalid virtual pointer dereference and application crash. Exploitation requires local access and user interaction but no privileges. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS score of 7.8. No known exploits are currently reported in the wild. The issue is fixed in version 2.
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 through 7.0.12 may allow an authenticated attacked to execute arbitrary commands via a specialy crafted HTTP request.
A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow an authenticated attacker to crash the HTTP daemon via crafted HTTP requests.
CVE-2026-24640 is a stack-based buffer overflow vulnerability affecting multiple versions of Fortinet FortiWeb (7.0.2 through 8.0.2). It allows a remote authenticated attacker, who can bypass stack protection and ASLR, to execute arbitrary code or commands via specially crafted HTTP requests. Exploitation requires high privileges and no user interaction but has a medium CVSS score of 5.9 due to the complexity of bypassing protections. No known exploits are currently reported in the wild. The vulnerability impacts confidentiality, integrity, and availability of affected systems.
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] vulnerability in Fortinet FortiSOAR Agent Communication Bridge 1.1.0, FortiSOAR Agent Communication Bridge 1.0 all versions may allow an unauthenticated attacker to read files accessible to the fortisoar user on a system where the agent is deployed, via sending a crafted request to the agent port.
CVE-2026-24017 is a high-severity vulnerability in Fortinet FortiWeb versions 7.0.0 through 8.0.2 that allows remote unauthenticated attackers to bypass authentication rate-limiting via crafted requests. This improper control of interaction frequency flaw enables attackers to perform brute-force or credential-stuffing attacks more effectively by circumventing protections designed to limit repeated login attempts. Exploitation does not require user interaction or prior authentication but depends on attacker resources and password complexity. The vulnerability impacts confidentiality, integrity, and availability of affected systems. No known exploits are currently reported in the wild. Organizations using FortiWeb as a web application firewall should prioritize patching or mitigating this issue to prevent potential account compromise or service disruption.
An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4 may allow a remote unauthenticated attacker to provide arbitrary data enabling a social engineering attack via spoofed URL parameters.
An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4 all versions, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiAnalyzer Cloud 7.6.0 through 7.6.4, FortiAnalyzer Cloud 7.4 all versions, FortiAnalyzer Cloud 7.2 all versions, FortiAnalyzer Cloud 7.0 all versions, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4 all versions, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager 6.4 all versions, FortiManager Cloud 7.6.0 through 7.6.4, FortiManager Cloud 7.4 all versions, FortiManager Cloud 7.2 all versions, FortiManager Cloud 7.0 all versions, FortiManager Cloud 6.4 all versions may allow an attacker to bypass bruteforce protections via exploitation of race conditions. The latter raises the complexity of practical exploitation.
A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.8, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager 6.4 all versions may allow a remote unauthenticated attacker to view confidential information via a man in the middle [MiTM] attack.
CVE-2025-48418 is a medium severity vulnerability affecting multiple versions of Fortinet FortiAnalyzer and FortiManager products, including their cloud variants. It allows a remote authenticated user with read-only admin CLI access to escalate privileges by exploiting a hidden command functionality. The vulnerability impacts confidentiality, integrity, and availability, enabling attackers to gain higher privileges than intended. Exploitation requires authentication but no user interaction beyond that. No known exploits are currently reported in the wild. The affected versions span several major releases, indicating a broad attack surface. Organizations using Fortinet FortiAnalyzer or FortiManager should prioritize patching or mitigating this issue. The CVSS score is 6.4, reflecting moderate risk due to the need for authenticated access and the potential impact of privilege escalation. Countries with significant Fortinet deployments and critical infrastructure reliance on these products are at higher risk.
CVE-2025-49784 is a medium severity SQL injection vulnerability affecting multiple versions of Fortinet FortiAnalyzer and FortiAnalyzer-BigData products. It allows an authenticated attacker with high privileges to execute unauthorized code or commands by sending specially crafted requests. The vulnerability impacts FortiAnalyzer versions 6.2 through 7.6.4 and FortiAnalyzer-BigData versions 6.2 through 7.6.0. Exploitation requires no user interaction but does require authentication with elevated privileges.
An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.2 through 7.2.11, FortiManager 7.6.0 through 7.6.3, FortiManager 7.4.0 through 7.4.7, FortiManager 7.2.2 through 7.2.11 may allow an attacker with knowledge of the admins password to bypass multifactor authentication checks via submitting multiple crafted requests.