Fortinet Fortigate SSO Login Authentication Bypass (FG-IR-25-647)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the FG-IR-25-647 advisory. - An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0,... CVE-2025-59719 - ...

The vulnerability of FortiOS operating systems and FortiProxy proxy servers in terms of authentication procedures allows attackers to gain unauthorized access to protected information.

The vulnerabilities of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow a malicious actor, operating remotely, to gain unauthorized access to...

The vulnerability of Fortinet FortiOS operating systems arises from operations beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of Fortinet FortiOS operating systems lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Fortinet FortiManager device management software, the FortiAnalyzer network monitoring device, the FortiOS operating systems, and the FortiProxy proxy server for protection against Internet attacks is related to a buffer overflow in dynamic memory. This vulnerability allows an attacker to execute arbitrary code or perform arbitrary commands.

The vulnerability of the Fortinet FortiManager device management software, FortiAnalyzer network monitoring software, FortiOS operating systems, and FortiProxy proxy servers for protection against internet attacks is related to buffer overflow in dynamic memory. Exploiting this vulnerability allo...

The vulnerability of Fortinet FortiOS operating systems arises from operations beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of Fortinet FortiOS operating systems lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerabilities of the FortiOS operating systems, the FortiProxy proxy server for protecting against internet attacks, and the scalable cloud-based security system FortiSASE are related to the lack of protective measures for the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerabilities of the FortiOS operating systems, the FortiProxy proxy server for protecting against internet attacks, and the scalable cloud-based security system FortiSASE are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a...

Vulnerabilities of the FortiOS operating system, the FortiPAM account management system, and the FortiProxy proxy server, related to buffer overflows in dynamic memory, allow attackers to execute arbitrary code.

The vulnerabilities of the FortiOS operating system, the FortiPAM account management system, and the FortiProxy proxy server for protecting against Internet attacks are related to buffer overflows in dynamic memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary co...

The vulnerability of the command-line interface (CLI) of FortiOS operating systems, the FortiProxy proxy server for protecting against internet attacks, and the FortiPAM identity management system, allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the command-line interface CLI of FortiOS operating systems, the FortiProxy proxy server for protecting against internet attacks, and the FortiPAM identity management system are related to insecure privilege management. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server, related to the disclosure of information through registration files, allows attackers to gain unauthorized access to the protected information.

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to the disclosure of information through registration files. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to the protected...

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server, related to improper security checks for standard elements, allows attackers to circumvent existing security restrictions.

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to improper security checks for standard elements. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

CVE-2025-54821

An Improper Privilege Management vulnerability CWE-269 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3...

CVE-2025-53843

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to execute unauthorized code or commands via specially crafted packets...

CVE-2025-58413

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiSASE 25.3.b allows attacker to execute...

Vulnerabilities fixed in Fortinet FortiOS

Fortinet has fixed vulnerabilities in FortiOS multiple versions. The vulnerabilities include a stack-based buffer overflow that allows attackers to execute unauthorized code or commands by sending specially crafted packets. A specific vulnerability in the FortiOS CAPWAP daemon allows a remote,...

CVE-2025-58413

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiSASE 25.3.b allows attacker to execute...

CVE-2025-58413

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiSASE 25.3.b allows attacker to execute...

CVE-2025-54821

An Improper Privilege Management vulnerability CWE-269 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.11, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM...

CVE-2025-53843

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to execute unauthorized code or commands via specially crafted packets...

CVE-2025-54821

An Improper Privilege Management vulnerability CWE-269 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3...

CVE-2025-53843

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to execute unauthorized code or commands via specially crafted packets...