SSA-975644: Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices

Summary

Vulnerabilities 6

• Critical 9.4
  CVE-2026-24858 Exploited Public exploit EPSS 87%

  An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnal…

  Fortinet FortiOS FortiManager FortiProxy Network devices
  Jan 27, 2026

  KEV Jan 27, 2026
• Medium 5.4
  CVE-2025-61624 Exploited

  An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet Fo…

  Fortinet FortiOS FortiProxy FortiPAM Network devices
  Apr 14, 2026

  KEV Oct 16, 2026
• Medium 6.7
  CVE-2025-64157

  A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 throu…

  Fortinet FortiOS Network devices
  Feb 10, 2026
• Medium 6.2
  CVE-2025-53847

  A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 thr…

  Fortinet FortiOS Network devices
  Apr 14, 2026
• Medium 5.2
  CVE-2025-55018

  An inconsistent interpretation of http requests ('http request smuggling') vulnerability in Fortinet FortiOS 7.6.0, For…

  Fortinet FortiOS Network devices
  Feb 10, 2026
• Low 3.8
  CVE-2025-62439

  An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet FortiOS…

  Fortinet FortiOS Network devices
  Feb 10, 2026

Revision history

1. 2026-05-12 #2

   Added CVE-2025-61624 and CVE-2025-53847

2. 2026-03-10 #1

   Publication Date

References

• SSA-975644: Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices - HTML Version
  https://cert-portal.siemens.com/productcert/html/ssa-975644.html