CVE-2025-22862
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiOS 7.4.0 through 7.4.7, 7.2.0 through 7.2.11, 7.0.6 and above; and FortiProxy 7.6.0 through 7.6.2, 7.4.0 through 7.4.8, 7.2 all versions, 7.0.5 and above may allow an authenticated attacker to elevate their privileges via triggering a malicious Webhook action in the Automation Stitch component.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.3
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C
- EPSS probability
- 0.25%
- CWE
- CWE-288
- Published
- 2025-10-02
- Last modified
- 2026-08-11
Affected products
- Fortinet FortiProxy
- Fortinet FortiProxy
- Fortinet FortiProxy
- Fortinet FortiProxy
- Fortinet FortiOS
- Fortinet FortiOS
- Fortinet FortiOS
Weakness type
Related vulnerabilities
- CVE-2026-20079 — Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
- CVE-2026-18577 — Incomplete patch leads to administrative account takeover
- CVE-2026-18556 — Unauthenticated administrative account takeover
- CVE-2026-28411 — WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`
- CVE-2026-27842 — Authentication bypass issue exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an attacker to bypass authentication an
- CVE-2026-33950 — signalk-server: Privilege Escalation by Admin Role Injection via /enableSecurity
- CVE-2026-34040 — Moby has AuthZ plugin bypass when provided oversized request bodies
- CVE-2026-32678 — Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical confi