A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiProxy 7.4.0, FortiProxy 7.2.0 through 7.2.6, FortiProxy 7.0.0 through 7.0.12, FortiProxy 2.0.0 through 2.0.13, FortiSASE 23.2.b allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade FortiProxy to 7.2.7Upgrade FortiProxy to 7.0.13Upgrade FortiProxy to 7.4.1Upgrade FortiProxy to 2.0.14Upgrade to the latest version of FortiProxy | Sep 30, 2026 | Feb 27, 2024 |
| Fortios | — | Upgrade FortiOS to 6.4.15Upgrade FortiOS to 6.2.16Upgrade FortiOS to 7.0.13Upgrade FortiOS to 7.4.2Upgrade FortiOS to 7.2.6 | Mar 18, 2024 | Mar 12, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub