CVE-2025-62439: Fortinet FortiOS

Medium severity, CVSS 4.2. EPSS: 0.2% chance of exploitation in the next 30 days.

An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions may allow an authenticated user with knowledge of FSSO policy configurations to gain unauthorized access to protected network resources via crafted requests.

Affected products

• Fortinet FortiOS: from 7.6.0, up to and including 7.6.4; from 7.4.0, up to and including 7.4.9; from 7.2.0, up to and including 7.2.13; from 7.0.0, up to and including 7.0.19
• Siemens Ruggedcom APE1808: any version

Published 2026-02-10. Last modified 2026-06-17.