onyx

onyx --cves cve-2024-35279

CVE-2024-35279

score
<0.1
cvss
8.1
epss
1.0%
published
2025-02-11
kev added
—
first seen

Fortinet FortiOS 7.2.4-7.2.8 and 7.4.0-7.4.4 contain a stack-based buffer overflow caused by crafted UDP packets in CAPWAP control, letting remote unauthenticated attackers execute arbitrary code or commands, exploit requires evasion of stack protections and fabric service running on exposed interface.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2025-02-11 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 1.0%2026-09-23: epss 1.0%2026-09-24: epss 1.0%2026-09-25: epss 1.0%2026-09-26: epss 1.0%2026-09-27: epss 1.0%2026-09-29: epss 1.0%2026-09-30: epss 1.0%2026-10-01: epss 1.0%2026-10-02: epss 1.0%2026-10-03: epss 1.0%2026-10-04: epss 1.0%2026-10-05: epss 1.0%2026-10-06: epss 1.0%2026-10-07: epss 1.0%2026-10-08: epss 1.0%2026-10-09: epss 1.0%2026-10-10: epss 1.0%2026-10-11: epss 1.0%2026-10-12: epss 1.0%2026-10-13: epss 1.0%2026-10-14: epss 1.0%2026-10-15: epss 1.0%2026-10-16: epss 1.0%2026-10-18: epss 1.0%2026-10-19: epss 1.0%2026-10-20: epss 1.0%2026-10-21: epss 1.0%1.0%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-121

References 1