The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An insufficient verification of data authenticity vulnerability [CWE-345] in Fortinet FortiOS SSL-VPN tunnel mode version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.7 and before 7.0.12 & FortiProxy SSL-VPN tunnel mode version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.7 and before 7.0.13 allows an authenticated VPN user to send (but not receive) packets spoofing the IP of another user via crafted network packets.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade FortiProxy to 7.0.14Upgrade to the latest version of FortiProxyUpgrade FortiProxy to 7.4.2Upgrade FortiProxy to 7.2.8 | Sep 30, 2026 | May 14, 2024 |
| Fortios | — | Upgrade FortiOS to 7.2.8Upgrade FortiOS to 7.4.2Upgrade FortiOS to 7.0.13Upgrade to the latest version of FortiOS | May 28, 2024 | May 14, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub