Description
An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4.0 through 6.4.15, FortiProxy 7.6.0 through 7.6.1, FortiProxy 7.4.0 through 7.4.7, FortiWeb 7.6.0 through 7.6.1, FortiWeb 7.4.0 through 7.4.6 allows an authenticated attacker with at least read-only admin permissions to gain super-admin privileges via crafted requests to Node.js websocket module.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiOS | 7.6.0 – ≤ 7.6.1, 7.4.0 – ≤ 7.4.6, 7.2.0 – ≤ 7.2.10, 7.0.0 – ≤ 7.0.16, 6.4.0 – ≤ 6.4.15 | — |
| Fortinet | FortiProxy | 7.6.0 – ≤ 7.6.1, 7.4.0 – ≤ 7.4.7 | — |
| Fortinet | FortiWeb | 7.6.0 – ≤ 7.6.1, 7.4.0 – ≤ 7.4.6 | — |
Advisories 4
- ICSA-25-044-06 Siemens RUGGEDCOM APE1808 CISA ICS & IT advisories · Mar 12, 2026
- SSA-770770 SSA-770770: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.7 on RUGGEDCOM APE1808 Devices Siemens ProductCERT · Mar 10, 2026
- NCSC-2025-0192 Kwetsbaarheden verholpen in Fortinet FortiOS NCSC-NL (Netherlands) · Jun 12, 2025
- WID-SEC-2025-1290 Fortinet FortiOS, FortiProxy, FortiWeb: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Jun 10, 2025