Not scored
CVE-2025-55018
Fortinet FortiOS vulnerability
FortinetFortiOS
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.4%probability of exploitation in the next 30 days
Higher than 34% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
An inconsistent interpretation of http requests ('http request smuggling') vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4.3 through 6.4.16 may allow an unauthenticated attacker to smuggle an unlogged http request through the firewall policies via a specially crafted header
Coverage 1 article · 1 outlet
- Siemens RUGGEDCOM APE1808 DevicesCISA · first in our coverage · official notice