CVE WatchJul 14, 2026

CVE-2025-67862

An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6

CVSS

6.7

Medium

EPSS

0.1%

KEV

—

Exploit Today

0-100

Published: Jun 9, 2026 · Last modified: Jul 14, 2026 · CWE-1244

EPSS · 30d

0.1%EPSS · 30 days0.1%

2026-06-302026-07-17

Technical description

An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0 all versions may allow an authenticated admin to execute lua scripts via crafted CLI commands.

Official references

fortiguard.fortinet.comhttps://fortiguard.fortinet.com/psirt/FG-IR-26-143
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-864900.html

Related CVEs

No related CVEs by CWE or product.