CVE-2019-5587: Fortinet FortiOS

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow attacker to implant malicious programs into the installing image by reassembling the image through specific methods.

Affected products

• Fortinet FortiOS: before 6.0.5 (fixed in 6.0.5)

Published 2019-06-04. Last modified 2026-06-17.