# CVE-2026-30897: A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6…

Source: https://junglewise.ai/threats/cve-2026-30897-a-stack-based-buffer-overflow-vulnerability-in-fortinet-fortiweb  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-03-10  
License: CC BY 4.0 with a link back

CVE-2026-30897 · Severity: medium · CVSS 6.6 · Published 2026-03-10

A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote authenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands via crafted HTTP requests.

Technologies: [Fortinet FortiWeb](https://junglewise.ai/threats/technologies/fortiweb). Vendors: [Fortinet](https://junglewise.ai/threats/vendors/fortinet).

## Quick answers

**Is CVE-2026-30897 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-30897 being exploited in the wild.

**How severe is CVE-2026-30897?** Medium severity, with a CVSS score of 6.6, published 10 March 2026.

**Which products and versions are affected?** Fortinet FortiWeb. The advisory does not name versions.

**Is there a fix for CVE-2026-30897?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-30897?** Check whether you run Fortinet FortiWeb. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Fortinet FortiWeb

## Related threats

- [A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through…](https://junglewise.ai/threats/cve-2026-70466-a-incomplete-list-of-disallowed-inputs-vulnerability-in-fortinet)
- [An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb…](https://junglewise.ai/threats/cve-2026-26035-an-improper-authentication-vulnerability-cwe-287-vulnerability-in)
- [Fortinet FortiWeb out-of-bounds write in CGI daemon](https://junglewise.ai/threats/cve-2026-40688-fortinet-fortiweb-out-of-bounds-write-in-cgi-daemon)
- [A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6…](https://junglewise.ai/threats/cve-2026-39814-a-relative-path-traversal-vulnerability-in-fortinet-fortiweb-8-0)
- [A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6…](https://junglewise.ai/threats/cve-2026-39811-a-integer-overflow-or-wraparound-vulnerability-in-fortinet)