CVE-2016-7541

5.9 mediumEPSS 1.0%

Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is configured in flow mode. All FortiGate versions with IPS configured in proxy mode (the default mode) are not affected.

Severity

CVSS 3.0

5.9 medium

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-254
Published: 2017-03-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortios

References

http://fortiguard.com/advisory/FG-IR-16-088
http://www.securityfocus.com/bid/94477
http://fortiguard.com/advisory/FG-IR-16-088
http://www.securityfocus.com/bid/94477

Check your stack JSON