Fortinet FortiExtender vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Fortinet FortiExtender: 3 record(s), with affected versions and fixes.
CVE-2025-64153
High · 7.2
CWE-78 Dec 9, 2025
A improper neutralization of special elements used in an os command ('os command injection') in...
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender 7.6.0 through 7.6.3, FortiExtender 7.4.0 through 7.4.7, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated attacker to execute unauthorized code or commands via a specific HTTP request.
CVE-2025-46776
High · 7.8
CWE-120 Nov 18, 2025
Classic Buffer Overflow in Fortinet Fortiextender Firmware
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to execute arbitrary code or commands via crafted CLI commands.
CVE-2025-46775
Medium · 5.5
CWE-1295 Nov 18, 2025
A debug messages revealing unnecessary information vulnerability in Fortinet…
A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to obtain administrator credentials via debug log commands.