CVE-2025-25255

An Improperly Implemented Security Check for Standard vulnerability [CWE-358] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0.1 through 7.0.22 may allow an unauthenticated proxy user to bypass the domain fronting protection feature via crafted HTTP requests.

Scoring

Severity

MEDIUM

CVSS base score

4.8

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C

EPSS probability

0.40%

CWE

CWE-358

Published

2025-10-14

Last modified

2026-03-12

Affected products

• Fortinet FortiOS
• Fortinet FortiProxy
• Fortinet FortiProxy
• Fortinet FortiProxy
• Fortinet FortiProxy

Weakness type

• CWE-358

Related vulnerabilities

• CVE-2026-46582 — A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path
• CVE-2026-65058 — Trezor Safe improper security check in on-device display
• CVE-2026-49783 — Secure Boot Security Feature Bypass Vulnerability
• CVE-2026-54431 — Improper Data Validation in liboauth2
• CVE-2026-12577 — DVP80ES3 Improperly Implemented Security Check for Standard vulnerability
• CVE-2026-48797 — Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication
• CVE-2026-42081 — free5GC: UE Security Capability bypass on NGAP PathSwitchRequest
• CVE-2026-42082 — free5GC: Missing Concurrent NAS SMC Validation During NGAP Handover

Markdown version · Browse all CVEs