Suggestions search

Untriaged

Filter by:

With package: terraform-providers.fortinetdev_fortios

Found 3 matching suggestions

View:

Compact

Detailed

Permalink CVE-2025-62826

3.1 LOW

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): Low (L)
Availability (A): None (N)
Exploit Code Maturity (E): Proof-of-Concept (P)
Remediation Level (RL): Official Fix (O)
Report Confidence (RC): Confirmed (C)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): None (N)

created 2 weeks, 1 day ago Activity log

Created suggestion 2 weeks, 1 day ago

An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP …

An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions may allow an attacker able to intercept and modify a user's captive portal authentication request to inject arbitrary headers via crafted HTTP requests.

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-153

Affected products

FortiOS

=<7.4.8
=<7.0.19
=<7.6.2
=<7.2.13
=<6.4.16

FortiPAM

=<1.4.3
=<1.1.2
=<1.3.1
=<1.6.2
==1.7.0
=<1.0.3
=<1.5.1
==1.2.0

FortiProxy

=<7.0.23
=<7.2.16
=<7.4.14
=<7.6.4

Matching in nixpkgs

pkgs.terraform-providers.fortios

None

nixos-unstable 1.24.1
- nixpkgs-unstable 1.24.1
- nixos-unstable-small 1.24.1
nixos-26.05 1.24.1
- nixos-26.05-small 1.24.1
- nixpkgs-26.05-darwin 1.24.1

pkgs.python313Packages.fortiosapi

Python module to work with Fortigate/Fortios devices

nixos-unstable 1.0.5
- nixpkgs-unstable 1.0.5
- nixos-unstable-small 1.0.5
nixos-26.05 1.0.5
- nixos-26.05-small 1.0.5
- nixpkgs-26.05-darwin 1.0.5

pkgs.python314Packages.fortiosapi

Python module to work with Fortigate/Fortios devices

nixos-unstable 1.0.5
- nixpkgs-unstable 1.0.5
- nixos-unstable-small 1.0.5
nixos-26.05 1.0.5
- nixos-26.05-small 1.0.5
- nixpkgs-26.05-darwin 1.0.5

pkgs.terraform-providers.fortinetdev_fortios

None

nixos-unstable 1.24.1
- nixpkgs-unstable 1.24.1
- nixos-unstable-small 1.24.1
nixos-26.05 1.24.1
- nixos-26.05-small 1.24.1
- nixpkgs-26.05-darwin 1.24.1

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>

Permalink CVE-2026-59839

5.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Physical (P)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): High (H)
Availability (A): High (H)
Exploit Code Maturity (E): Proof-of-Concept (P)
Remediation Level (RL): Official Fix (O)
Report Confidence (RC): Confirmed (C)
Modified Attack Vector (MAV): Physical (P)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 2 weeks, 1 day ago Activity log

Created suggestion 2 weeks, 1 day ago

A improper limitation of a pathname to a restricted directory …

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.8.0, FortiPAM 1.7.0 through 1.7.2, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-151

Affected products

FortiOS

=<7.0.19
=<7.4.9
=<7.6.6
=<7.2.13
=<6.4.16

FortiPAM

=<1.4.3
=<1.1.2
=<1.3.1
=<1.6.2
=<1.0.3
=<1.5.1
==1.2.0
==1.8.0
=<1.7.2

FortiProxy

=<7.0.23
=<7.2.16
=<7.4.13
=<7.6.5

Matching in nixpkgs

pkgs.terraform-providers.fortios

None

nixos-unstable 1.24.1
- nixpkgs-unstable 1.24.1
- nixos-unstable-small 1.24.1
nixos-26.05 1.24.1
- nixos-26.05-small 1.24.1
- nixpkgs-26.05-darwin 1.24.1

pkgs.python313Packages.fortiosapi

Python module to work with Fortigate/Fortios devices

nixos-unstable 1.0.5
- nixpkgs-unstable 1.0.5
- nixos-unstable-small 1.0.5
nixos-26.05 1.0.5
- nixos-26.05-small 1.0.5
- nixpkgs-26.05-darwin 1.0.5

pkgs.python314Packages.fortiosapi

Python module to work with Fortigate/Fortios devices

nixos-unstable 1.0.5
- nixpkgs-unstable 1.0.5
- nixos-unstable-small 1.0.5
nixos-26.05 1.0.5
- nixos-26.05-small 1.0.5
- nixpkgs-26.05-darwin 1.0.5

pkgs.terraform-providers.fortinetdev_fortios

None

nixos-unstable 1.24.1
- nixpkgs-unstable 1.24.1
- nixos-unstable-small 1.24.1
nixos-26.05 1.24.1
- nixos-26.05-small 1.24.1
- nixpkgs-26.05-darwin 1.24.1

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>

Permalink CVE-2026-59840

4.3 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): None (N)
Availability (A): None (N)
Exploit Code Maturity (E): Proof-of-Concept (P)
Remediation Level (RL): Official Fix (O)
Report Confidence (RC): Confirmed (C)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 2 weeks, 1 day ago Activity log

Created suggestion 2 weeks, 1 day ago

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, …

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions may allow attacker to information disclosure via <insert attack vector here>