PT-2025-41967 · Fortinet · Fortiadc

Published 2025-10-14 · Updated 2025-10-16 · CVE-2025-59921

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Fortinet FortiADC versions 7.4.0, 7.2.3 and below, 7.1.4 and below, 7.0 all versions, 6.2 all versions

Description An issue exists in Fortinet FortiADC that may allow an authenticated attacker to obtain sensitive data via crafted HTTP or HTTPS requests. The issue is related to an exposure of sensitive information to an unauthorized actor.

Recommendations Update to a version later than 7.4.0. Update to a version later than 7.2.3. Update to a version later than 7.1.4. Update to a version later than 7.0. Update to a version later than 6.2.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2026-05224

CVE-2025-59921

Affected Products

Fortiadc

References · 7

• https://osv.dev/vulnerability/CVE-2025-59921 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59921 · Security Note
• https://bdu.fstec.ru/vul/2026-05224 · Security Note
• https://t.me/cveNotify/138953 · Telegram Post
• https://twitter.com/CVEnew/status/1978123685056729150 · Twitter Post
• https://fortiguard.fortinet.com/psirt/FG-IR-23-434 · Note
• https://t.me/CVEtracker/34871 · Telegram Post