Medium · published October 14, 2025
A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy 7.6.0 through 7.6.1, 7.4.0 through 7.4.7, FortiOS 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.2 through 7.0.16, FortiSwitchManager 7.2.1 through 7.2.5 allows attackers to escalate their privilege via specially crafted http requests.
| Product | Versions | Fixed in |
|---|---|---|
| fortinet/fortios | ≥ 7.0.2, < 7.0.17 | 7.0.17 |
| fortinet/fortios | ≥ 7.2.0, < 7.2.11 | 7.2.11 |
| fortinet/fortios | ≥ 7.4.0, < 7.4.7 | 7.4.7 |
| fortinet/fortios | ≥ 7.6.0, < 7.6.3 | 7.6.3 |
| fortinet/fortipam | ≥ 1.0.0, < 1.4.3 | 1.4.3 |
| fortinet/fortipam | all versions | — |
| fortinet/fortiproxy | ≥ 7.4.0, < 7.4.8 | 7.4.8 |
| fortinet/fortiproxy | ≥ 7.6.0, < 7.6.2 | 7.6.2 |
| fortinet/fortisra | ≥ 1.4.0, < 1.4.3 | 1.4.3 |
| fortinet/fortisra | all versions | — |
| fortinet/fortiswitchmanager | ≥ 7.2.1, < 7.2.6 | 7.2.6 |