Summary
Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiOS ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder Code auszuführen.
Product
FortiOS ist ein gehärtetes Betriebssystem für FortiGate Plattformen.
Vulnerabilities 5
-
Medium 5.3
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS…
KEV Jul 27, 2026 -
High 7.5
An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 through 7.…
-
Medium 6.7
A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 throu…
-
Medium 5.2
An inconsistent interpretation of http requests ('http request smuggling') vulnerability in Fortinet FortiOS 7.6.0, For…
-
Low 3.8
An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet FortiOS…
Revision history
-
#2
CVE-2025-68686 wird ausgenutzt
-
#1
Initiale Fassung
References
-
FG-IR-25-667 vom 2026-02-10
https://www.fortiguard.com/psirt/FG-IR-25-667
-
FG-IR-25-384 vom 2026-02-10
https://www.fortiguard.com/psirt/FG-IR-25-384
-
FG-IR-25-795 vom 2026-02-10
https://www.fortiguard.com/psirt/FG-IR-25-795
-
FG-IR-25-934 vom 2026-02-10
https://www.fortiguard.com/psirt/FG-IR-25-934
-
FG-IR-25-1052 vom 2026-02-10
https://www.fortiguard.com/psirt/FG-IR-25-1052
-
CISA Adds Two Known Exploited Vulnerabilities to Catalog vom 2026-07-27
https://www.cisa.gov/news-events/alerts/2026/07/27/cisa-adds-two-known-exploited-vulnerabilities-catalog