CVE-2023-27997

VendorfortinetProductfortios, fortiproxyDiscoveredJun 13, 2023UpdatedJul 31, 2026

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below, version 1.2 all versions, version 1.1 all versions SSL-VPN may allow a remote attacker to execute arbitrary code or commands via specifically crafted requests.

View graph Watch Export

CVSS v3.1

9.8 CRITICAL

EPSS

85.7%

probability of exploitation in 30 days

CISA KEV

Listed

confirmed active exploitation

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

ScopeUNCHANGED

ConfidentialityHIGH

IntegrityHIGH

AvailabilityHIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Connections

5 relationships

CWE-122

source

Timeline

disclosure → media coverage

Jun 13, 2023

Disclosure — published as a CVE record. · last revised by NVD Jul 31, 2026

Jun 22, 2026

incibe.es reports: Exposición de credenciales en dispositivos Fortinet asociada a la explotación de SSL-VPN

Sep 15, 2026

securityweek.com reports: Thai Broadband Provider Hacked via Fortinet Vulnerability

Public PoC (10)

github.com/rio128128/CVE-2023-27997-POC github.com/BishopFox/CVE-2023-27997-check github.com/imbas007/CVE-2023-27997-Check github.com/puckiestyle/cve-2023-27997 github.com/TechinsightsPro/ShodanFortiOS github.com/Cyb3rEnthusiast/CVE-2023-27997 github.com/lexfo/xortigate-cve-2023-27997 github.com/delsploit/CVE-2023-27997 github.com/node011/CVE-2023-27997-POC github.com/onurkerembozkurt/fgt-cve-2023-27997-exploit

Unverified third-party code — review before executing.