A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager version 7.2.5, and FortiOS versions 7.4.4 through 7.4.6 and version 7.6.0 may allow an attacker with knowledge of an existing admin account to access the device as a valid admin via an authentication bypass.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade to the latest version of FortiProxyUpgrade FortiProxy to 7.6.2 | Sep 30, 2026 | May 13, 2025 |
| Fortinet Fortiswitchmanager | — | Upgrade to the latest version of FortiSwitchManagerUpgrade FortiSwitchManager to 7.2.6 | Sep 30, 2026 | May 13, 2025 |
| Fortios | — | Upgrade FortiOS to 7.6.1Upgrade FortiOS to 7.4.7 | Jun 6, 2025 | May 13, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub