VULNERABILITY INTELLIGENCE

CVE-2025-46775

CVSS score5.2 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2025-11-18
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:U/RC:C

Description

A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to obtain administrator credentials via debug log commands.

Weakness classification

  • CWE-1295: Debug Messages Revealing Unnecessary Information

Primary references