CVE-2025-43892
A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0
CVSS
4.3
Medium
EPSS
0.4%
p32
KEV
—
Exploit Today
10
0-100
Published: Jul 14, 2026 · Last modified: Aug 11, 2026 · CWE-126
0.3%EPSS · 30 days0.4%
2026-08-232026-09-20
A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow an authenticated remote attacker to return a portion of device memory in the redirect response via submitting a specially crafted request.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-252947.4 HIG5.2%
——2Transient DOS while parsing frame during channel usage.3dCVE-2026-252847.3 HIG1.3%
——0Information Disclosure when a pointer is reused after being deallocated.3dCVE-2026-252757.5 HIG22.8%
——7Transient DOS when processing authentication frames with invalid FILS information element header lengths.3dCVE-2026-240817.4 HIG5.2%
——2Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.3dCVE-2026-240757.8 HIG1.5%
——0Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.3dCVE-2026-906103.3 LOW1.9%
——1A vulnerability was found in GPAC up to f1219cde. This affects the function gf_svg_attributes_copy of the file scenegraph/svg_attributes.c of the component MP4Box. Performing a manipulation results in buffer over-read. The attack is only possible with local access. The exploit has been made public and could be used. Upgrading to version abi-16.23 mitigates this issue. The patch is named afca1f1181668d85941d51ed1adf647807d5d975. Upgrading the affected component is recommended.6d