CyberCVE

CVE-2025-62439

An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, Fort

Severity
Low 3.8
CVSS 3.1
Exploited
Not listed
EPSS
0.001
4.0th percentile
Discovered by
Third party
Vendor advisory field
Published
Feb 10, 2026
Assigned by fortinet

Description

An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions may allow an authenticated user with knowledge of FSSO policy configurations to gain unauthorized access to protected network resources via crafted requests.

Weakness: CWE-940

Affected products

Vendor Product Category Matched by
Fortinet FortiOS Firewall / NGFW cna-assigner
Vendor-reported products (2)
  • Fortinet · FortiOS
  • Siemens · RUGGEDCOM APE1808

Credit

Fortinet is pleased to thank Tijl Deneut from e-BO Enterprises for reporting this vulnerability under responsible disclosure.

Vendor remediation

Upgrade to upcoming FortiOS version 8.0.0 or above Upgrade to FortiOS version 7.6.5 or above Upgrade to FortiOS version 7.4.10 or above

References

Something wrong here?