The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade FortiProxy to 7.2.9Upgrade FortiProxy to 7.4.3Upgrade FortiProxy to 7.0.16Upgrade to the latest version of FortiProxy | Sep 30, 2026 | Feb 8, 2024 |
| Fortinet Fortiswitchmanager | — | Upgrade FortiSwitchManager to 7.2.4Upgrade FortiSwitchManager to 7.0.4Upgrade to the latest version of FortiSwitchManager | Sep 30, 2026 | Feb 8, 2024 |
| Fortios | — | Upgrade FortiOS to 7.4.3Upgrade FortiOS to 7.2.7Upgrade FortiOS to 7.0.14 | Feb 12, 2024 | Feb 8, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub