cvedb.io
CVE-2025-55018
MEDIUM · CVSS 5.8
EPSS exploitation probability: 0%
Published 2026-02-10T16:16:08.913 · Last modified 2026-06-17T09:41:07.123

Summary

An inconsistent interpretation of http requests ('http request smuggling') vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4.3 through 6.4.16 may allow an unauthenticated attacker to smuggle an unlogged http request through the firewall policies via a specially crafted header

Affected products

fortinet — fortios

Does this affect you?

Add your gear to cvedb and we'll alert you only when fortinet ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.