A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0.0 through 6.0.16, FortiPAM 1.1.0, FortiPAM 1.0 all versions, FortiProxy 7.2.0 through 7.2.5, FortiProxy 7.0.0 through 7.0.11, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1 all versions, FortiProxy 1.0 all versions, FortiSwitchManager 7.2.0 through 7.2.2, FortiSwitchManager 7.0.0 through 7.0.2 allows attacker to execute unauthorized code or commands via specially crafted cli commands and http requests.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade to the latest version of FortiProxyUpgrade FortiProxy to 7.0.12Upgrade FortiProxy to 7.2.6 | Sep 30, 2026 | May 14, 2024 |
| Fortinet Fortiswitchmanager | — | Upgrade FortiSwitchManager to 7.2.3Upgrade to the latest version of FortiSwitchManagerUpgrade FortiSwitchManager to 7.0.3 | Sep 30, 2026 | May 14, 2024 |
| Fortios | — | Upgrade FortiOS to 7.4.1Upgrade FortiOS to 7.2.6Upgrade to the latest version of FortiOS | May 28, 2024 | May 14, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub