Improper Verification of Communication Source in Fortinet FortiOS
CVE-2025-62439

3.8LOW

Key Information:

Vendor

Fortinet
Status
FortiOS
Vendor
CVE Published:
10 February 2026

What is CVE-2025-62439?

An improper verification of the source of a communication channel vulnerability exists in Fortinet FortiOS versions 7.6.0 through 7.6.4, 7.4.0 through 7.4.9, and all versions of 7.2 and 7.0. An authenticated user who has knowledge of FSSO policy configurations may exploit this vulnerability to issue specially crafted requests, potentially gaining unauthorized access to protected network resources. This poses significant security risks as it can lead to unauthorized data exposure or manipulation. Organizations utilizing affected versions should implement immediate measures to mitigate this vulnerability.

Affected Version(s)

FortiOS 7.6.0 <= 7.6.4

FortiOS 7.4.0 <= 7.4.9

FortiOS 7.2.0 <= 7.2.13

References

https://fortiguard.fortinet.com/psirt/FG-IR-25-384

CVSS V3.1

Score:
3.8
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.