CVE-2025-55018

MEDIUM

5.8

Descricao

An inconsistent interpretation of http requests ('http request smuggling') vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4.3 through 6.4.16 may allow an unauthenticated attacker to smuggle an unlogged http request through the firewall policies via a specially crafted header

Detalhes CVE

Pontuacao CVSS v3.15.8

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado2/10/2026

Ultima modificacao2/23/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

fortinet:fortios

Fraquezas (CWE)

CWE-444

Referencias

https://fortiguard.fortinet.com/psirt/FG-IR-25-667(psirt@fortinet.com)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.