Low WID-SEC-2026-2329 4 CVEs

Fortinet FortiProxy und FortiOS: Mehrere Schwachstellen

Published Jul 14, 2026 · Updated Jul 14, 2026 · de-DE

Vendor: Fortinet Product: FortiOS Product: FortiProxy

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Fortinet FortiOS und Fortinet FortiProxy ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren und Informationen offenzulegen.

Product

FortiOS ist ein gehärtetes Betriebssystem für FortiGate Plattformen.
FortiProxy ist eine Web-Proxy Lösung.

Vulnerabilities 4

Medium 4.1

CVE-2025-43892

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all …

Fortinet FortiOS Network devices

Jul 14, 2026
Medium 4.1

CVE-2026-59840

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all …

Fortinet FortiOS FortiProxy FortiPAM Network devices

Jul 14, 2026
Low 3.4

CVE-2025-62675

An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulner…

Fortinet FortiOS FortiProxy FortiPAM Network devices

Jul 14, 2026
Low 3.1

CVE-2025-62826

An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulner…

Fortinet FortiOS FortiProxy FortiPAM Network devices

Jul 14, 2026

Revision history

2026-07-14 #1
Initiale Fassung

References

FortiGuard Labs PSIRT Advisory FG-IR-26-152 vom 2026-07-14
https://www.fortiguard.com/psirt/FG-IR-26-152
FortiGuard Labs PSIRT Advisory FG-IR-26-153 vom 2026-07-14
https://www.fortiguard.com/psirt/FG-IR-26-153
FortiGuard Labs PSIRT Advisory FG-IR-26-154 vom 2026-07-14
https://www.fortiguard.com/psirt/FG-IR-26-154