CVEvulnerability

CVE-2025-43892

4.3 MEDIUM Published 2026-07-14 Modified 2026-09-29 Official page ↗
Status
Modified
Published
2026-07-14
Last modified
2026-09-29
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-126

Description

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow an authenticated remote attacker to return a portion of device memory in the redirect response via submitting a specially crafted request.

Affected configurations

• fortinet fortiproxy (>= 7.2.0 <= 7.2.15) • fortinet fortiproxy (>= 7.4.0 <= 7.4.13) • fortinet fortiproxy (>= 7.6.0 <= 7.6.5) • fortinet fortios (>= 7.2.0 <= 7.2.13) • fortinet fortios (>= 7.4.0 <= 7.4.8) • fortinet fortios (>= 7.6.0 <= 7.6.2)

Related

Weakness · CWE (1)

  • CWE-126 Buffer Over-read weakness

References