CVE Watch14 jul 2026

CVE-2025-67862

An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6

CVSS

6.7

Medio

EPSS

0.1%

KEV

—

Exploit Today

0-100

Publicado: 9 jun 2026 · Última mod.: 14 jul 2026 · CWE-1244

EPSS · 30d

0.1%EPSS · 30 días0.1%

2026-06-302026-07-17

Descripción técnica

An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0 all versions may allow an authenticated admin to execute lua scripts via crafted CLI commands.

Referencias oficiales

fortiguard.fortinet.comhttps://fortiguard.fortinet.com/psirt/FG-IR-26-143
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-864900.html

CVEs relacionados

Sin CVEs relacionados por CWE o producto.