The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0.0 through 6.0.16, FortiPAM 1.1.0, FortiPAM 1.0 all versions, FortiProxy 7.2.0 through 7.2.5, FortiProxy 7.0.0 through 7.0.11, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via specially crafted commands
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade FortiProxy to 7.2.6Upgrade to the latest version of FortiProxyUpgrade FortiProxy to 7.0.12 | Sep 30, 2026 | May 14, 2024 |
| Fortinet Fortiswitchmanager | — | Upgrade to the latest version of FortiSwitchManagerUpgrade FortiSwitchManager to 7.0.3Upgrade FortiSwitchManager to 7.2.3 | Sep 30, 2026 | May 14, 2024 |
| Fortios | — | Upgrade FortiOS to 7.2.6Upgrade FortiOS to 7.4.1Upgrade to the latest version of FortiOS | May 28, 2024 | May 14, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub