CVE-2024-26008CWE-754

An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version…

Medium · published October 14, 2025

CVSS v3.1
5.0
EPSS
1%
Percentile
46.8
In the wild
Unconfirmed
What it is

An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and before 7.2.9, FortiPAM before 1.2.0 and FortiSwitchManager version 7.2.0 through 7.2.3 and version 7.0.0 through 7.0.3 fgfm daemon may allow an unauthenticated attacker to repeatedly reset the fgfm connection via crafted SSL encrypted TCP requests.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:C
CVSS v4.0
Not supplied
EPSS
0.00576 · 46.8th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2025-10-14T15:23Z
EPSS history
Timeline
  • 14 OCT 15:23Z
    An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version…
    cvelistv5