CVE-2025-24472 Fortinet FortiOS And FortiProxy
Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain super-admin privileges via crafted CSF proxy requests.
- CVSS
- not scored
On CISA’s exploited list
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
- Added
- 2025-03-18
- Federal patch deadline
- 2025-04-08
- Ransomware use
- known