CVE-2025-55018

5.8 mediumEPSS 0.4%

Medium (5.8) in fortinet fortios. EPSS 0.4% chance of exploitation in the next 30 days.

An inconsistent interpretation of http requests ('http request smuggling') vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4.3 through 6.4.16 may allow an unauthenticated attacker to smuggle an unlogged http request through the firewall policies via a specially crafted header

Severity

CVSS 3.1

5.8 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
CWE: CWE-444
Published: 2026-02-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortios

References

https://fortiguard.fortinet.com/psirt/FG-IR-25-667
https://cert-portal.siemens.com/productcert/html/ssa-975644.html

Check your stack JSON