An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and before 7.2.9, FortiPAM before 1.2.0 and FortiSwitchManager version 7.2.0 through 7.2.3 and version 7.0.0 through 7.0.3 fgfm daemon may allow an unauthenticated attacker to repeatedly reset the fgfm connection via crafted SSL encrypted TCP requests.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade FortiProxy to 7.2.10Upgrade to the latest version of FortiProxyUpgrade FortiProxy to 7.4.4 | Sep 30, 2026 | Oct 14, 2025 |
| Fortinet Fortiswitchmanager | — | Upgrade FortiSwitchManager to 7.2.4Upgrade to the latest version of FortiSwitchManagerUpgrade FortiSwitchManager to 7.0.4 | Sep 30, 2026 | Oct 14, 2025 |
| Fortios | — | Upgrade to the latest version of FortiOSUpgrade FortiOS to 7.2.8Upgrade FortiOS to 7.4.4 | Nov 7, 2025 | Oct 14, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub