PT-2026-47805 · Fortinet · Fortiproxy+1

CVE-2025-67862

·

Published

2026-06-09

·

Updated

2026-06-11

CVSS v2.0

6.8

Medium

VectorAV:L/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions FortiOS versions 7.6.0 through 7.6.2 FortiOS versions 7.4.0 through 7.4.7 FortiOS versions 7.2.0 through 7.2.10 FortiOS versions 7.0.0 through 7.0.16 FortiOS versions 6.4 all versions FortiProxy versions 7.6.0 through 7.6.3 FortiProxy versions 7.4.0 through 7.4.10 FortiProxy versions 7.2.0 through 7.2.14 FortiProxy versions 7.0 all versions
Description An internal asset is exposed to an unsafe debug access level or state, which may allow an authenticated administrator to execute lua scripts by using crafted CLI commands.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unsafe Debug Access Level

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-08505
CVE-2025-67862

Affected Products

Fortios
Fortiproxy