CVE-2025-43892

Published: Jul 14, 2026Modified: Aug 11, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: psirt@fortinet.com (Secondary)

Description

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow an authenticated remote attacker to return a portion of device memory in the redirect response via submitting a specially crafted request.

Affected (6)

Products: Fortinet: Fortios, Fortiproxy

Fortinet

2 products

Fortios

Fortiproxy

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortios	From 7.2.0 to 7.2.13
Fortinet Fortios	From 7.4.0 to 7.4.8
Fortinet Fortios	From 7.6.0 to 7.6.2
Fortinet Fortiproxy	From 7.2.0 to 7.2.15
Fortinet Fortiproxy	From 7.4.0 to 7.4.13
Fortinet Fortiproxy	From 7.6.0 to 7.6.5

Related CWEs

CWE-126

Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

References (2)

https://fortiguard.fortinet.com/psirt/#5944

Source: psirt@fortinet.com

Vendor Advisory

https://cert-portal.siemens.com/productcert/html/ssa-864900.html

Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.