CVE-2025-43892

MEDIUM CVSS 4.3 View on NVD ↗

Description

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions may allow an authenticated remote attacker to return a portion of device memory in the redirect response via submitting a specially crafted request.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References

https://fortiguard.fortinet.com/psirt/#5944

Published: Jul 14, 2026 16:16 UTC Modified: Jul 14, 2026 16:38 UTC