Description
An exposure of sensitive information to an unauthorized actor in Fortinet FortiOS at least version at least 7.4.0 through 7.4.1 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.15 and 6.4.0 through 6.4.15 allows attacker to information disclosure via HTTP requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiOS | 7.4.0 – ≤ 7.4.1, 7.2.0 – ≤ 7.2.5, 7.0.0 – ≤ 7.0.15, 6.4.0 – ≤ 6.4.15 | — |
Advisories 3
- ICSA-24-074-05 Siemens RUGGEDCOM APE1808 CISA ICS & IT advisories · Jan 14, 2026
- SSA-832273 SSA-832273: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.3 on RUGGEDCOM APE1808 Devices Siemens ProductCERT · Jan 13, 2026
- WID-SEC-2024-0833 Fortinet FortiOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2024