CVE-2025-59028

When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentication sessions to fail. Invalid BASE64 data can be used to DoS a vulnerable server to break concurrent logins. Install fixed version or disable concurrency in login processes hea...

FortiOS Page Handler Arbitrary File Upload

The vulnerability of the /logindisconnect/currentadmins page handler in the FortiOS operating system is related to access control errors. Exploiting this vulnerability allows a malicious actor to upload arbitrary files to a device using specially crafted POST requests...

FortiOS Web Interface Cross Site Fraudulently

The vulnerability in the FortiOS operating system’s web interface is related to the lack of authentication for requests. Exploiting this vulnerability allows a malicious actor to perform cross-site forgery of requests to pages like /logindisconnect/disconnectadmins or...

FortiOS DoS

The vulnerability of the /logindisconnect/disconnectadmins page handler in the FortiOS operating system is due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to cause service failures by sending incorrect values to the application—values that are not...

FortiOS DoS

The vulnerability of the /logindisconnect/currentadmins page handler in the FortiOS operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures by using a specially crafted POST request...

PT-2019-2874

Name of the Vulnerable Software and Affected Versions FortiOS affected versions not specified Description The issue is related to insufficient input validation in the /login disconnect/disconnect admins page handler of the FortiOS web interface. This can be exploited by a remote attacker to cause...

PT-2019-2871

Name of the Vulnerable Software and Affected Versions FortiOS affected versions not specified Description The issue is related to a lack of authentication check in the web interface of the FortiOS operating system. This can be exploited by a remote attacker to perform a cross-site request forgery...

PT-2019-2875

Name of the Vulnerable Software and Affected Versions FortiOS affected versions not specified Description The issue is related to an error in processing the Payload parameter and a lack of request authentication in the httpsd process of FortiOS. This can be exploited by a remote attacker to perfo...

PT-2019-2877

Name of the Vulnerable Software and Affected Versions FortiOS affected versions not specified Description The issue is related to errors in access control in the FortiOS web interface, specifically affecting the /login disconnect/current admins page handler. It allows a remote attacker to upload...

PT-2019-2876

Name of the Vulnerable Software and Affected Versions FortiOS affected versions not specified Description The issue is related to insufficient input validation in the /login disconnect/current admins page handler of the FortiOS web interface. It can be exploited by a remote attacker using a...