VULNERABILITY INTELLIGENCE
CVE-2025-62439
CVSS score4.2 MEDIUM
EPSS probability0.16%
CISA KEVNot currently listed
Published2026-02-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
Description
An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions may allow an authenticated user with knowledge of FSSO policy configurations to gain unauthorized access to protected network resources via crafted requests.
Weakness classification
- psirt@fortinet.com: CWE-940