The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortianalyzer | — | Upgrade FortiAnalyzer to 6.0.12Upgrade FortiAnalyzer to 7.0.5Upgrade FortiAnalyzer to 7.2.1Upgrade FortiAnalyzer to 6.2.11Upgrade FortiAnalyzer to 6.4.12 | Apr 7, 2026 | Mar 7, 2023 |
| Fortinet Fortimanager | — | Upgrade FortiManager to 6.2.11Upgrade FortiManager to 6.0.12Upgrade FortiManager to 7.2.1Upgrade FortiManager to 7.0.5Upgrade FortiManager to 6.4.12 | May 25, 2026 | Mar 7, 2023 |
| Fortinet Fortiproxy | — | Upgrade FortiProxy to 7.2.3Upgrade to the latest version of FortiProxyUpgrade FortiProxy to 7.0.9 | Sep 30, 2026 | Mar 7, 2023 |
| Fortinet Fortiswitchmanager | — | Upgrade FortiSwitchManager to 7.0.2Upgrade FortiSwitchManager to 7.2.2Upgrade to the latest version of FortiSwitchManager | Sep 30, 2026 | Mar 7, 2023 |
| Fortinet Fortiweb | — | Upgrade FortiWeb to 6.1.4Upgrade FortiWeb to 7.2.2Upgrade to the latest version of FortiWebUpgrade FortiWeb to 7.0.7Upgrade FortiWeb to 6.4.3Upgrade FortiWeb to 6.2.8Upgrade FortiWeb to 6.3.23 | Jul 2, 2026 | Mar 7, 2023 |
| Fortios | — | Upgrade FortiOS to 6.4.12Upgrade FortiOS to 7.2.4Upgrade to the latest version of FortiOSUpgrade FortiOS to 7.0.10Upgrade FortiOS to 6.2.13 | Apr 21, 2023 | Mar 7, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub