CVE-2025-67862
An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0 all versions may allow an authenticated admin to execute lua scripts via crafted CLI commands.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
- EPSS probability
- 0.15%
- CWE
- CWE-1244
- Published
- 2026-06-09
- Last modified
- 2026-08-11
Affected products
- Fortinet FortiOS
- Fortinet FortiOS
- Fortinet FortiOS
- Fortinet FortiOS
- Fortinet FortiOS
- Fortinet FortiProxy
- Fortinet FortiProxy
- Fortinet FortiProxy
Weakness type
Related vulnerabilities
- CVE-2026-8989 — Open Recovery Mode
- CVE-2025-36755 — CleverDisplay BlueOne unauthorized BIOS access through physical USB keyboard
- CVE-2025-42878 — Sensitive Data Exposure in SAP Web Dispatcher and Internet Communication Manager (ICM)
- CVE-2025-23337 — NVIDIA HGX & DGX GB200, GB300, B300 contain a vulnerability in the HGX Management Controller (HMC)...
- CVE-2025-23302 — NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the LS10 could enable an...
- CVE-2025-23301 — NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the VBIOS could enable an...
- CVE-2025-20238 — A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco...
- CVE-2025-23252 — The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to...