The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions and FortiOS version 7.6.2 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions ZTNA proxy may allow an unauthenticated attacker in a man-in-the middle position to intercept and tamper with connections to the ZTNA proxy
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade FortiProxy to 7.4.9Upgrade to the latest version of FortiProxyUpgrade FortiProxy to 7.6.2 | Sep 30, 2026 | Oct 14, 2025 |
| Fortios | — | Upgrade FortiOS to 7.6.3Upgrade to the latest version of FortiOSUpgrade FortiOS to 7.4.9 | Nov 7, 2025 | Oct 14, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub