PT-2026-47805 · Fortinet · Fortios+1

Published 2026-06-09 · Updated 2026-06-09 · CVE-2025-67862

Mitre

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0 all versions may allow an authenticated admin to execute lua scripts via crafted CLI commands.

Fix

Unsafe Debug Access Level

Weakness Enumeration

CWE-1244

Related Identifiers

CVE-2025-67862

Affected Products

Fortios

Fortiproxy

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-67862 · Security Note
• https://fortiguard.fortinet.com/psirt/FG-IR-26-143 · Note