CVEvulnerability

CVE-2025-67604

5.3 MEDIUM Published 2026-05-12 Modified 2026-10-14 Official page ↗
Status
Analyzed
Published
2026-05-12
Last modified
2026-10-14
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-676

Description

A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.8, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager 6.4 all versions may allow an authenticated attacker to cause a system hang via multiple specially crafted HTTP requests causing crashes. This happens if internal locks are aligned, which is out of control of the attacker.

Affected configurations

• fortinet fortianalyzer (>= 7.2.0 <= 7.2.12) • fortinet fortianalyzer (>= 7.4.0 < 7.4.9) • fortinet fortianalyzer (>= 7.6.0 < 7.6.5) • fortinet fortimanager (>= 7.2.0 <= 7.2.12) • fortinet fortimanager (>= 7.4.0 < 7.4.9) • fortinet fortimanager (>= 7.6.0 < 7.6.5)

Related

Weakness · CWE (1)

  • CWE-676 Use of Potentially Dangerous Function weakness

References