The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitrary webserver
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortianalyzer | — | Upgrade to the latest version of FortiAnalyzerUpgrade FortiAnalyzer to 7.6.0 | May 26, 2026 | Jan 14, 2025 |
| Fortinet Fortiauthenticator | — | Upgrade to the latest version of FortiAuthenticatorUpgrade FortiAuthenticator to 6.4.2Upgrade FortiAuthenticator to 6.3.4 | Aug 5, 2026 | Jan 14, 2025 |
| Fortinet Fortimanager | — | Upgrade FortiManager to 7.6.0Upgrade to the latest version of FortiManager | May 25, 2026 | Jan 14, 2025 |
| Fortinet Fortiproxy | — | Upgrade FortiProxy to 7.4.0Upgrade to the latest version of FortiProxyUpgrade FortiProxy to 7.0.5Upgrade FortiProxy to 7.0.0 | Sep 30, 2026 | Jan 14, 2025 |
| Fortios | — | Upgrade FortiOS to 7.2.1Upgrade FortiOS to 7.2.5Upgrade FortiOS to 7.0.12Upgrade FortiOS to 7.0.6Upgrade FortiOS to 6.4.13Upgrade FortiOS to 7.4.0Upgrade to the latest version of FortiOS | Feb 14, 2025 | Jan 14, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub