Authentication Bypass Vulnerability in Fortinet FortiProxy and FortiOS

CVE-2025-22252

What is CVE-2025-22252?

The vulnerability allows an attacker to exploit a missing authentication for a critical function in specified versions of Fortinet FortiProxy, FortiSwitchManager, and FortiOS. By leveraging an existing admin account, the attacker can bypass authentication measures, potentially gaining unauthorized administrative access to the affected devices. This poses a significant risk to the overall security and integrity of network systems relying on these Fortinet products.

References