← Back

CVE-2024-26008

nvd nist
Published: Oct 14, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Exploitability: 3.9 / Impact: 1.4
Source: psirt@fortinet.com (Secondary)

Description

An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and before 7.2.9, FortiPAM before 1.2.0 and FortiSwitchManager version 7.2.0 through 7.2.3 and version 7.0.0 through 7.0.3 fgfm daemon may allow an unauthenticated attacker to repeatedly reset the fgfm connection via crafted SSL encrypted TCP requests.

Affected (7)

Fortinet
4 products
Fortios
Fortipam
Fortiproxy
Fortiswitchmanager
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Fortinet
Fortios
From 6.2.0 to 7.2.8
Fortios
From 7.4.0 to 7.4.4
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Fortipam
From 1.0.0 to 1.3.0
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Fortinet
Fortiproxy
From 1.2.0 to 7.2.10
Fortiproxy
From 7.4.0 to 7.4.4
Configuration D
2 vulnerable
Vulnerable SoftwareAffected Versions
Fortinet
Fortiswitchmanager
From 7.0.0 to 7.0.4
Fortiswitchmanager
From 7.2.0 to 7.2.4

Related CWEs

CWE-754
Improper Check for Unusual or Exceptional Conditions
The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (1)

Source: psirt@fortinet.com
Vendor Advisory

Timeline

No history available yet.