A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy 7.6.0 through 7.6.1, 7.4.0 through 7.4.7, FortiOS 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.2 through 7.0.16, FortiSwitchManager 7.2.1 through 7.2.5 allows attackers to escalate their privilege via specially crafted http requests.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade FortiProxy to 7.4.8Upgrade FortiProxy to 7.6.2Upgrade to the latest version of FortiProxy | Sep 30, 2026 | Oct 14, 2025 |
| Fortinet Fortiswitchmanager | — | Upgrade FortiSwitchManager to 7.2.6Upgrade to the latest version of FortiSwitchManager | Sep 30, 2026 | Oct 14, 2025 |
| Fortios | — | Upgrade FortiOS to 7.6.3Upgrade FortiOS to 7.2.11Upgrade FortiOS to 7.4.7Upgrade FortiOS to 7.0.17 | May 28, 2026 | Oct 14, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub