← CVE Intelligence

CVE-2025-55018

Fortinet / FortiOS PUBLISHED

Description (CNA)

An inconsistent interpretation of http requests ('http request smuggling') vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4.3 through 6.4.16 may allow an unauthenticated attacker to smuggle an unlogged http request through the firewall policies via a specially crafted header

Affected (CNA)

Vendor / productVersions
Fortinet / FortiOSaffected 7.6.0; affected 7.4.0 through 7.4.9; affected 7.2.0 through 7.2.13; affected 7.0.0 through 7.0.19; affected 6.4.3 through 6.4.16

CWE

CWE-444

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

siemens-SADP

No English description supplied.