CVE-2025-43892

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.6.0 through 7.6.3 FortiOS versions 7.4.0 through 7.4.8 FortiOS 7.2 (affected versions not specified) FortiOS 7.0 (affected versions not specified) FortiOS 6.4 (affected versions not specified)

Description An authenticated remote attacker can cause a buffer over-read, which occurs when a program reads more data from a buffer than it should, potentially exposing sensitive information. By submitting a specially crafted request, the attacker can retrieve a portion of the device memory within the redirect response.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.