Description
An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7 and below, 7.0 all versions, 6.4 all versions and FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions may allow a remote unauthenticated user to bypass the DNS filter via Apple devices.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiOS | 7.6.0, 7.4.0 – ≤ 7.4.7, 7.2.0 – ≤ 7.2.10, 7.0.0 – ≤ 7.0.17, 6.4.0 – ≤ 6.4.16 | — |
| Fortinet | FortiProxy | 7.6.0 – ≤ 7.6.1, 7.4.0 – ≤ 7.4.8, 7.2.0 – ≤ 7.2.14, 7.0.0 – ≤ 7.0.21 | — |
Advisories 3
- SSA-864900 SSA-864900: Multiple Vulnerabilities in Fortigate NGFW before V7.6.6 on RUGGEDCOM APE1808 Devices Siemens ProductCERT · Oct 13, 2026
- ICSA-25-135-01 Siemens RUGGEDCOM APE1808 Devices CISA ICS & IT advisories · Jul 9, 2026
- WID-SEC-2025-1486 Fortinet FortiOS / FortiProxy: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Jul 8, 2025