CVE-2018-13376: Fortinet FortiOS

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions under web proxy's disclaimer response web pages, potentially causing sensitive data to be displayed in the HTTP response.

Affected products

• Fortinet FortiOS: up to and including 5.2.12; from 5.4.6, up to and including 5.4.7; from 5.6.1, up to and including 5.6.3

Published 2018-11-27. Last modified 2026-06-17.