An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0 all versions may allow an authenticated admin to execute lua scripts via crafted CLI commands.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade FortiProxy to 7.6.4Upgrade to the latest version of FortiProxyUpgrade FortiProxy to 7.2.15Upgrade FortiProxy to 7.4.11 | Sep 30, 2026 | Jun 9, 2026 |
| Fortios | — | Upgrade FortiOS to 7.0.17Upgrade to the latest version of FortiOSUpgrade FortiOS to 7.4.8Upgrade FortiOS to 7.2.11Upgrade FortiOS to 7.6.3 | Jun 23, 2026 | Jun 9, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub