Debug Information Disclosure in Fortinet FortiExtender Products

CVE-2025-46775

What is CVE-2025-46775?

The Fortinet FortiExtender products are compromised by a vulnerability that exposes sensitive debug messages, potentially allowing authenticated users to access critical administrator credentials. This issue affects several versions of FortiExtender, making it paramount for users to mitigate risks associated with unauthorized access through the exploitation of debug log commands. Addressing this vulnerability is crucial for maintaining the integrity and security of network infrastructures reliant on FortiExtender.

References