CVE-2025-62439

medium Fortinet
CVSS v3 Base Score
4.2
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
Published: February 10, 2026
Last Modified: February 10, 2026
Vendor: Fortinet

Description

An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions may allow an authenticated user with knowledge of FSSO policy configurations to gain unauthorized access to protected network resources via crafted requests.

CWE

CWE-940

References

🔗 fortiguard.fortinet.com