Fortinet, a leading cybersecurity provider, has issued patches for several critical vulnerabilities impacting multiple products, including FortiAnalyzer, FortiClient, FortiManager, and FortiOS.
These vulnerabilities could allow attackers to perform unauthorized operations, escalate privileges, or hijack user sessions. Below are detailed descriptions of the key vulnerabilities, their impact, and the recommended fixes.
Client-side enforcement of server-side security vulnerability (CWE-602) in FortiAnalyzer may allow authenticated attackers with read-only permissions to execute sensitive operations by sending crafted requests.
Free Ultimate Continuous Security Monitoring Guide - Download Here (PDF)
This vulnerability is especially concerning as it could provide unauthorized users with access to privileged actions. Affected Products and Versions:
| Product | Affected Versions | Solution |
| FortiAnalyzer 7.4 | 7.4.0 through 7.4.1 | Upgrade to 7.4.3 or above |
| FortiAnalyzer 7.2 | 7.2.0 through 7.2.4 | Upgrade to 7.2.6 or above |
| FortiAnalyzer 7.0 | 7.0.0 through 7.0.11 | Upgrade to 7.0.13 or above |
| FortiAnalyzer 6.4 | 6.4.0 through 6.4.14 | Upgrade to 6.4.15 or above |
| FortiAnalyzer-BigData 7.4 | 7.4.0 | Upgrade to 7.4.1 or above |
| FortiAnalyzer-BigData 7.2 | 7.2.0 through 7.2.6 | Upgrade to 7.2.7 or above |
| FortiAnalyzer-BigData 7.0 | 7.0 all versions | Migrate to a fixed release |
| FortiAnalyzer-BigData 6.4 | 6.4 all versions | Migrate to a fixed release |
| FortiAnalyzer-BigData 6.2 | 6.2 all versions | Migrate to a fixed release |
| FortiManager 7.4 | 7.4.0 through 7.4.1 | Upgrade to 7.4.3 or above |
| FortiManager 7.2 | 7.2.0 through 7.2.4 | Upgrade to 7.2.6 or above |
| FortiManager 7.0 | 7.0.0 through 7.0.11 | Upgrade to 7.0.13 or above |
| FortiManager 6.4 | 6.4.0 through 6.4.14 | Upgrade to 6.4.15 or above |
A privilege context switching error vulnerability (CWE-270) in FortiClient Windows could enable an authenticated user to escalate their privileges by exploiting the lua auto patch scripts.
This vulnerability can lead to unauthorized actions and potentially full system compromise. Affected Products and Versions:
| Product | Affected Versions | Solution |
| FortiClient Windows 7.4 | Not affected | Not Applicable |
| FortiClient Windows 7.2 | 7.2.0 through 7.2.4 | Upgrade to 7.2.5 or above |
| FortiClient Windows 7.0 | 7.0.0 through 7.0.12 | Upgrade to 7.0.13 or above |
| FortiClient Windows 6.4 | 6.4.0 through 6.4.10 | Migrate to a fixed release |
A session fixation vulnerability (CWE-384) in FortiOS may allow attackers to hijack user sessions via phishing attempts exploiting the SAML authentication mechanism.
This vulnerability can lead to unauthorized code execution or command execution by hijacking SSL-VPN sessions. Affected Products and Versions:
| Product | Affected Versions | Solution |
| FortiOS 7.4 | 7.4.0 through 7.4.3 | Upgrade to 7.4.4 or above |
| FortiOS 7.2 | 7.2.0 through 7.2.7 | Upgrade to 7.2.8 or above |
| FortiOS 7.0 | 7.0.0 through 7.0.13 | Upgrade to 7.0.14 or above |
An authentication bypass using an alternate path (CWE-288) in FortiClient (Windows) allows low-privilege attackers to execute arbitrary code with high privileges by sending spoofed named pipe messages. Affected Products and Versions:
| Product | Affected Versions | Solution |
| FortiClient Windows 7.4 | 7.4.0 | Upgrade to 7.4.1 or above |
| FortiClient Windows 7.2 | 7.2.0 through 7.2.4 | Upgrade to 7.2.5 or above |
| FortiClient Windows 7.0 | 7.0.0 through 7.0.12 | Upgrade to 7.0.13 or above |
| FortiClient Windows 6.4 | 6.4 all versions | Migrate to a fixed release |
Fortinet has responded swiftly to these critical vulnerabilities by releasing patches and providing upgrade paths for affected products.
All users are strongly advised to update their systems to the recommended versions to mitigate the risks associated with these vulnerabilities.
Fortinet continues to prioritize security and proactively works with researchers to address vulnerabilities under responsible disclosure frameworks.
Run private, Real-time Malware Analysis in both Windows & Linux VMs. Get a 14-day free trial with ANY.RUN!
Unit 42 researchers at Palo Alto Networks, a highly targeted malicious campaign orchestrated by the…
DragonForce has swiftly risen as a formidable player in 2025, embodying a hybrid threat that…
The Akamai Security Intelligence and Response Team (SIRT) has identified active exploitation of command injection…
IBM has issued a security bulletin addressing two newly discovered, high-severity vulnerabilities in its Cognos…
Amazon Web Services (AWS) has addressed a critical security flaw (CVE-2025-4318) in its AWS Amplify Studio platform,…
A newly disclosed security vulnerability in Elastic’s Kibana platform has put thousands of businesses at…
%20(1).webp?w=1600&resize=1600,900&ssl=1)
