Fortinet Fortiextender Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Fortinet Fortiextender Firmware: 3 record(s), with affected versions and fixes.cpe:2.3:o:fortinet:fortiextender_firmware
CVE-2025-64153
High · 7.2
CWE-78 Dec 9, 2025
A improper neutralization of special elements used in an os command ('os command injection') in...
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender 7.6.0 through 7.6.3, FortiExtender 7.4.0 through 7.4.7, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated attacker to execute unauthorized code or commands via a specific HTTP request.
CVE-2025-46776
High · 7.8
CWE-120 Nov 18, 2025
A buffer copy without checking size of input ('classic buffer overflow') in Fortinet...
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to execute arbitrary code or commands via crafted CLI commands.
CVE-2025-46775
Medium · 5.5
CWE-1295 Nov 18, 2025
A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0...
A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to obtain administrator credentials via debug log commands.