The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiProxy version 7.2.0 through 7.2.2 and version 7.0.0 through 7.0.8 may allow an unauthenticated remote attacker to crash the WAD process via multiple crafted packets reaching proxy policies or firewall policies with proxy mode alongside SSL deep packet inspection.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade to the latest version of FortiProxyUpgrade FortiProxy to 7.2.3Upgrade FortiProxy to 7.0.9 | Sep 30, 2026 | Oct 10, 2023 |
| Fortios | — | Upgrade FortiOS to 7.2.5Upgrade FortiOS to 7.2.3Upgrade FortiOS to 7.4.0Upgrade FortiOS to 7.0.11 | Oct 16, 2023 | Oct 10, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub