CVE-2025-43892

Published: Jul 14, 2026Modified: Jul 16, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: psirt@fortinet.com (Secondary)

Description

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow an authenticated remote attacker to return a portion of device memory in the redirect response via submitting a specially crafted request.

Affected (6)

Products: Fortinet: Fortios, Fortiproxy

Fortinet

2 products

Fortios

Fortiproxy

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortios	From 7.2.0 to 7.2.13
Fortinet Fortios	From 7.4.0 to 7.4.8
Fortinet Fortios	From 7.6.0 to 7.6.2
Fortinet Fortiproxy	From 7.2.0 to 7.2.15
Fortinet Fortiproxy	From 7.4.0 to 7.4.13
Fortinet Fortiproxy	From 7.6.0 to 7.6.5

Related CWEs

CWE-126

Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

References (1)

https://fortiguard.fortinet.com/psirt/#5944

Source: psirt@fortinet.com

Vendor Advisory

Timeline

No history available yet.