Fortinet Security Updates – 10 July 2025

By /
  • 150/2025
  • Critical

Fortinet has released security updates to fix several vulnerabilities across multiple Fortinet products.

The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, or execute arbitrary code and gain access to the affected products.

Sample of the addressed vulnerabilities:

1. FortiWeb Unauthenticated SQL Injection in GUI Vulnerability (CVE-2025-25257):

  • CVSS: 9.6
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Access

2. FortiOS & FortiProxy Improper Access Control Vulnerability (CVE-2024-52965):

  • CVSS: 6.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: High
  • User Interaction: None
  • Consequences: Bypass security

Sample of the affected products:

  • FortiManager.
  • FortiAnalyzer.
  • FortiOS.
  • FortiProxy.
  • FortiWeb.
  • FortiSandbox.
Vulnerabilities
  • CVE-2024-32124
  • CVE-2025-47856
  • CVE-2024-55599
  • CVE-2025-24477
  • CVE-2024-52965
  • CVE-2025-24474
  • CVE-2024-27779
  • CVE-2025-25257
  • CVE-2024-26010
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Fortinet Security Advisory

References

Fortinet Security Advisory