Vulnerabilidades do Fortinet FortiExtender
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Fortinet FortiExtender: 3 registro(s), com versões afetadas e correções.
CVE-2025-64153
Alta · 7.2
CWE-78 09/12/2025
A improper neutralization of special elements used in an os command ('os command injection') in...
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender 7.6.0 through 7.6.3, FortiExtender 7.4.0 through 7.4.7, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated attacker to execute unauthorized code or commands via a specific HTTP request.
CVE-2025-46776
Alta · 7.8
CWE-120 18/11/2025
Classic Buffer Overflow em Fortinet Fortiextender Firmware
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to execute arbitrary code or commands via crafted CLI commands.
CVE-2025-46775
Média · 5.5
CWE-1295 18/11/2025
A debug messages revealing unnecessary information vulnerability in Fortinet…
A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to obtain administrator credentials via debug log commands.